morpheuslord/cve-llm-training huggingface dataset:
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0893.

assistant: Race condition in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to media.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0894.

assistant: Buffer overflow in the vorbis_parse_setup_hdr_floors function in the Vorbis decoder in vorbisdec.c in libavcodec in FFmpeg through 1.1.3, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (divide-by-zero error or out-of-bounds array access) or possibly have unspecified other impact via vectors involving a zero value for a bark map size.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0895.

assistant: Google Chrome before 25.0.1364.97 on Linux, and before 25.0.1364.99 on Mac OS X, does not properly handle pathnames during copy operations, which might make it easier for remote attackers to execute arbitrary programs via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0896.

assistant: Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, does not properly manage memory during message handling for plug-ins, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0897.

assistant: Off-by-one error in the PDF functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service via a crafted document.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0898.

assistant: Use-after-free vulnerability in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0899.

assistant: Integer overflow in the padding implementation in the opus_packet_parse_impl function in src/opus_decoder.c in Opus before 1.0.2, as used in Google Chrome before 25.0.1364.97 on Windows and Linux and before 25.0.1364.99 on Mac OS X and other products, allows remote attackers to cause a denial of service (out-of-bounds read) via a long packet.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0900.

assistant: Race condition in the International Components for Unicode (ICU) functionality in Google Chrome before 25.0.1364.97 on Windows and Linux, and before 25.0.1364.99 on Mac OS X, allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0902.

assistant: Use-after-free vulnerability in the frame-loader implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0903.

assistant: Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of browser navigation.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0904.

assistant: The Web Audio implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0905.

assistant: Use-after-free vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving an SVG animation.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0906.

assistant: The IndexedDB implementation in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0907.

assistant: Race condition in Google Chrome before 25.0.1364.152 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the handling of media threads.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0908.

assistant: Google Chrome before 25.0.1364.152 does not properly manage bindings of extension processes, which has unspecified impact and attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0909.

assistant: The XSS Auditor in Google Chrome before 25.0.1364.152 allows remote attackers to obtain sensitive HTTP Referer information via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0910.

assistant: Google Chrome before 25.0.1364.152 does not properly manage the interaction between the browser process and renderer processes during authorization of the loading of a plug-in, which makes it easier for remote attackers to bypass intended access restrictions via vectors involving a blocked plug-in.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0911.

assistant: Directory traversal vulnerability in Google Chrome before 25.0.1364.152 allows remote attackers to have an unspecified impact via vectors related to databases.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0912.

assistant: WebKit in Google Chrome before 25.0.1364.160 allows remote attackers to execute arbitrary code via vectors that leverage "type confusion."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0913.

assistant: Integer overflow in drivers/gpu/drm/i915/i915_gem_execbuffer.c in the i915 driver in the Direct Rendering Manager (DRM) subsystem in the Linux kernel through 3.8.3, as used in Google Chrome OS before 25.0.1364.173 and other products, allows local users to cause a denial of service (heap-based buffer overflow) or possibly have unspecified other impact via a crafted application that triggers many relocation copies, and potentially leads to a race condition.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0914.

assistant: The flush_signal_handlers function in kernel/signal.c in the Linux kernel before 3.8.4 preserves the value of the sa_restorer field across an exec operation, which makes it easier for local users to bypass the ASLR protection mechanism via a crafted application containing a sigaction system call.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0915.

assistant: The GPU process in Google Chrome OS before 25.0.1364.173 allows attackers to cause a denial of service or possibly have unspecified other impact via vectors related to an "overflow."
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0916.

assistant: Use-after-free vulnerability in the Web Audio implementation in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0917.

assistant: The URL loader in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (out-of-bounds read) via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0918.

assistant: Google Chrome before 26.0.1410.43 does not prevent navigation to developer tools in response to a drag-and-drop operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0919.

assistant: Use-after-free vulnerability in Google Chrome before 26.0.1410.43 on Linux allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging the presence of an extension that creates a pop-up window.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0920.

assistant: Use-after-free vulnerability in the extension bookmarks API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0921.

assistant: The Isolated Sites feature in Google Chrome before 26.0.1410.43 does not properly enforce the use of separate processes, which makes it easier for remote attackers to bypass intended access restrictions via a crafted web site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0922.

assistant: Google Chrome before 26.0.1410.43 does not properly restrict brute-force access attempts against web sites that require HTTP Basic Authentication, which has unspecified impact and attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0923.

assistant: The USB Apps API in Google Chrome before 26.0.1410.43 allows remote attackers to cause a denial of service (memory corruption) via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0924.

assistant: The extension functionality in Google Chrome before 26.0.1410.43 does not verify that use of the permissions API is consistent with file permissions, which has unspecified impact and attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0925.

assistant: Google Chrome before 26.0.1410.43 does not ensure that an extension has the tabs (aka APIPermission::kTab) permission before providing a URL to this extension, which has unspecified impact and remote attack vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0926.

assistant: Google Chrome before 26.0.1410.43 does not properly handle active content in an EMBED element during a copy-and-paste operation, which allows user-assisted remote attackers to have an unspecified impact via a crafted web site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0927.

assistant: Google Chrome OS before 26.0.1410.57 relies on a Pango pango-utils.c read_config implementation that loads the contents of the .pangorc file in the user's home directory, and the file referenced by the PANGO_RC_FILE environment variable, which allows attackers to bypass intended access restrictions via crafted configuration data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0928.

assistant: The NetWorker command processor in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary commands via a DCP "run command" operation.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0929.

assistant: Format string vulnerability in the _vsnsprintf function in rrobotd.exe in the Device Manager in EMC AlphaStor 4.0 before build 800 allows remote attackers to execute arbitrary code via format string specifiers in a command.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0930.

assistant: Buffer overflow in Drive Control Program (DCP) in EMC AlphaStor 4.0 before build 814 allows remote attackers to execute arbitrary code via vectors involving a new device name.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0931.

assistant: EMC RSA Authentication Agent 7.1.x before 7.1.2 on Windows does not enforce the Quick PIN Unlock timeout feature, which allows physically proximate attackers to bypass the passcode requirement for a screensaved session by entering a PIN after timeout expiration.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0932.

assistant: EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and upload arbitrary files via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0933.

assistant: Multiple cross-site scripting (XSS) vulnerabilities in EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0934.

assistant: EMC RSA Archer 5.x before GRC 5.3SP1, and Archer Smart Suite Framework 4.x, allows remote authenticated users to bypass intended access restrictions and modify global reports via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0935.

assistant: EMC Smarts Network Configuration Manager (NCM) before 9.2 does not require authentication for all Java RMI method calls, which allows remote attackers to execute arbitrary code via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0936.

assistant: Cross-site scripting (XSS) vulnerability in EMC Smarts IP Manager, Smarts Service Assurance Manager, Smarts Server Manager, Smarts VoIP Availability Manager, Smarts Network Protocol Manager, and Smarts MPLS Manager before 9.2 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0937.

assistant: Session fixation vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to hijack web sessions via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0938.

assistant: Cross-site scripting (XSS) vulnerability in EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0939.

assistant: EMC Documentum Webtop before 6.7 SP2, Documentum WDK before 6.7 SP2, Documentum Taskspace before 6.7 SP2, and Documentum Records Manager before 6.7 SP2 allow remote attackers to obtain sensitive information via vectors involving cross-origin frame navigation, related to a "Cross Frame Scripting" issue.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0940.

assistant: The nsrpush process in the client in EMC NetWorker before 7.6.5.3 and 8.x before 8.0.1.4 sets weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0941.

assistant: EMC RSA Authentication API before 8.1 SP1, RSA Web Agent before 5.3.5 for Apache Web Server, RSA Web Agent before 5.3.5 for IIS, RSA PAM Agent before 7.0, and RSA Agent before 6.1.4 for Microsoft Windows use an improper encryption algorithm and a weak key for maintaining the stored data of the node secret for the SecurID Authentication API, which allows local users to obtain sensitive information via cryptographic attacks on this data.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0942.

assistant: Cross-site scripting (XSS) vulnerability in EMC RSA Authentication Agent 7.1 before 7.1.1 for Web for Internet Information Services, and 7.1 before 7.1.1 for Web for Apache, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0943.

assistant: EMC NetWorker 7.6.x and 8.x before 8.1 allows local users to obtain sensitive configuration information by leveraging operating-system privileges to perform decryption with nsradmin.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0944.

assistant: The web-based file-restore interface in EMC Avamar Server before 6.1.0 allows remote authenticated users to read arbitrary files via a crafted URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0945.

assistant: EMC Avamar Client before 6.1.101-89 does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certificate, which allows man-in-the-middle attackers to spoof SSL servers via an arbitrary valid certificate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0946.

assistant: Buffer overflow in the Library Control Program (LCP) in EMC AlphaStor 4.0 before build 910 allows remote attackers to execute arbitrary code via crafted commands.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0947.

assistant: EMC RSA Authentication Manager 8.0 before P1 allows local users to discover cleartext operating-system passwords, HTTP plug-in proxy passwords, and SNMP communities by reading a (1) log file or (2) configuration file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0948.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0949.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0950.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0951.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0952.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0953.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0954.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0955.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0956.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0957.

assistant: Data Protection in Apple iOS before 7 allows attackers to bypass intended limits on incorrect passcode entry, and consequently avoid a configured Erase Data setting, by leveraging the presence of an app in the third-party sandbox.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0958.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0959.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0960.

assistant: WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0961.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0961.

assistant: WebKit in Apple Safari before 6.0.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, a different vulnerability than CVE-2013-0960.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0962.

assistant: Cross-site scripting (XSS) vulnerability in WebKit in Apple iOS before 6.1 allows user-assisted remote attackers to inject arbitrary web script or HTML via crafted content that is not properly handled during a copy-and-paste operation.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0963.

assistant: Identity Services in Apple iOS before 6.1 does not properly handle validation failures of AppleID certificates, which might allow physically proximate attackers to bypass authentication by leveraging an incorrect assignment of an empty string value to an AppleID.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0964.

assistant: The kernel in Apple iOS before 6.1 and Apple TV before 5.2 does not properly validate copyin and copyout arguments, which allows local users to bypass intended pointer restrictions and access locations in the first kernel-memory page by specifying a length of less than one page.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0966.

assistant: The Apple mod_hfs_apple module for the Apache HTTP Server in Apple Mac OS X before 10.8.3 does not properly handle ignorable Unicode characters, which allows remote attackers to bypass intended directory authentication requirements via a crafted pathname in a URI.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0967.

assistant: CoreTypes in Apple Mac OS X before 10.8.3 includes JNLP files in the list of safe file types, which allows remote attackers to bypass a Java plug-in disabled setting, and trigger the launch of Java Web Start applications, via a crafted web site.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0968.

assistant: WebKit, as used in Apple iOS before 6.1, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-01-28-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0969.

assistant: Login Window in Apple Mac OS X before 10.8.3 does not prevent application launching with the VoiceOver feature, which allows physically proximate attackers to bypass authentication and make arbitrary System Preferences changes via unspecified use of the keyboard.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0970.

assistant: Messages in Apple Mac OS X before 10.8.3 allows remote attackers to bypass the FaceTime call-confirmation prompt via a crafted FaceTime: URL.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0971.

assistant: Use-after-free vulnerability in PDFKit in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted ink annotations in a PDF document.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0973.

assistant: Software Update in Apple Mac OS X through 10.7.5 does not prevent plugin loading within the marketing-text WebView, which allows man-in-the-middle attackers to execute plugin code by modifying the client-server data stream.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0974.

assistant: StoreKit in Apple iOS before 6.1 does not properly handle the disabling of JavaScript within the preferences configuration of Mobile Safari, which allows remote attackers to bypass intended access restrictions and execute JavaScript code via a web site with a Smart App Banner.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0975.

assistant: Buffer overflow in QuickDraw Manager in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0976.

assistant: IOAcceleratorFamily in Apple Mac OS X before 10.8.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted graphics image.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0977.

assistant: dyld in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not properly manage the state of file loading for Mach-O executable files, which allows local users to bypass intended code-signing requirements via a file that contains overlapping segments.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0978.

assistant: The ARM prefetch abort handler in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 does not ensure that it has been invoked in an abort context, which makes it easier for local users to bypass the ASLR protection mechanism via crafted code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0979.

assistant: lockdownd in Lockdown in Apple iOS before 6.1.3 does not properly consider file types during the permission-setting step of a backup restoration, which allows local users to change the permissions of arbitrary files via a backup that contains a pathname with a symlink.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0980.

assistant: The Passcode Lock implementation in Apple iOS before 6.1.3 does not properly manage the lock state, which allows physically proximate attackers to bypass an intended passcode requirement by leveraging an error in the emergency-call feature.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0981.

assistant: The IOUSBDeviceFamily driver in the USB implementation in the kernel in Apple iOS before 6.1.3 and Apple TV before 5.2.1 accesses pipe object pointers that originated in userspace, which allows local users to gain privileges via crafted code.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0982.

assistant: The Private Browsing feature in CFNetwork in Apple Mac OS X before 10.8.4 does not prevent storage of permanent cookies upon exit from Safari, which might allow physically proximate attackers to bypass cookie-based authentication by leveraging an unattended workstation.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0983.

assistant: Stack consumption vulnerability in CoreAnimation in Apple Mac OS X before 10.8.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text glyph in a URL encountered by Safari.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0984.

assistant: Directory Service in Apple Mac OS X through 10.6.8 allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a crafted message.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0985.

assistant: Disk Management in Apple Mac OS X before 10.8.4 does not properly authenticate attempts to disable FileVault, which allows local users to cause a denial of service (loss of encryption functionality) via an unspecified command line.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0986.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0987.

assistant: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted QTIF file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0988.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FPX file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0989.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP3 file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0990.

assistant: SMB in Apple Mac OS X before 10.8.4, when file sharing is enabled, allows remote authenticated users to create or modify files outside of a shared directory via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0991.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0992.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0993.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0994.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0995.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0996.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0997.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0998.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-0999.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1000.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1001.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1002.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1003.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1004.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1005.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1006.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1007.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1008.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1009.

assistant: WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1023.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1010.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1011.

assistant: WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1012.

assistant: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via vectors involving IFRAME elements.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1013.

assistant: XSS Auditor in WebKit in Apple Safari before 6.0.5 does not properly rewrite URLs, which allows remote attackers to trigger unintended form submissions via unspecified vectors.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1014.

assistant: Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1015.

assistant: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted TeXML file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1016.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.263 encoding.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1017.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1018.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1019.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1020.

assistant: Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted JPEG data in a movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1021.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG data in a movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1022.

assistant: Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted mvhd atoms in a movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1023.

assistant: WebKit, as used in Apple Safari before 6.0.5, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site, a different vulnerability than CVE-2013-1009.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1024.

assistant: CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1025.

assistant: Buffer overflow in CoreGraphics in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JBIG2 data in a PDF document.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1026.

assistant: Buffer overflow in ImageIO in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted JPEG2000 data in a PDF document.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1027.

assistant: Installer in Apple Mac OS X before 10.8.5 provides an option to continue a package's installation after encountering a revoked certificate, which might allow user-assisted remote attackers to execute arbitrary code via a crafted package.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1028.

assistant: The IPSec implementation in Apple Mac OS X before 10.8.5, when Hybrid Auth is used, does not verify X.509 certificates from security gateways, which allows man-in-the-middle attackers to spoof security gateways and obtain sensitive information via a crafted certificate.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1029.

assistant: The kernel in Apple Mac OS X before 10.8.5 allows remote attackers to cause a denial of service (panic) via crafted IGMP packets that leverage incorrect, extraneous code in the IGMP parser.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1030.

assistant: mdmclient in Mobile Device Management in Apple Mac OS X before 10.8.5 places a password on the command line, which allows local users to obtain sensitive information by listing the process.
user: Describe the vulnerability: Provide detailed information about the vulnerability for CVE-2013-1031.

assistant: Power Management in Apple Mac OS X before 10.8.5 does not properly perform locking upon occurrences of a power assertion, which allows physically proximate attackers to bypass intended access restrictions by visiting an unattended workstation on which a locking failure had prevented the startup of the screen saver.