rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-1824 
The ps_drv.sys kernel driver in ArcaBit ArcaVir 2009 Antivirus Protection 9.4.3201.9 and earlier, ArcaVir 2009 Internet Security 9.4.3202.9 and earlier, ArcaVir 2009 System Protection 9.4.3203.9 and earlier, and ArcaBit 2009 Home Protection 9.4.3204.9 and earlier, allows local users to gain privileges via crafted METHOD_NEITHER IOCTL requests to \Device\ps_drv containing arbitrary kernel addresses, as demonstrated using the (1) 0x2A7B802B and possibly (2) 0x2A7B8004 and (3) 0x2A7B802F IOCTLs.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T18:00:00.000Z
CVE-2009-1825 
modules/admuser.php in myColex 1.4.2 does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T20:00:00.000Z
CVE-2009-1826 
modules/admuser.php in myGesuad 0.9.14 (aka 0.9) does not require administrative authentication, which allows remote authenticated users to list user accounts via a Find action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T20:00:00.000Z
CVE-2009-1827 
The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the r (aka Radius) attribute of a circle element, related to an "unclamped loop."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T20:00:00.000Z
CVE-2009-1828 
Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN element in conjunction with (1) a META element specifying automatic page refresh or (2) a JavaScript onLoad event handler for a BODY element. NOTE: it was later reported that earlier versions are also affected.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T20:00:00.000Z
CVE-2009-1829 
Unspecified vulnerability in the PCNFSD dissector in Wireshark 0.8.20 through 1.0.7 allows remote attackers to cause a denial of service (crash) via crafted PCNFSD packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T22:00:00.000Z
CVE-2009-1830 
Stack-based buffer overflow in Soulseek 156 and 157 NS allows remote attackers to execute arbitrary code via a long search query.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T22:00:00.000Z
CVE-2009-1831 
The Nullsoft Modern Skins Support module (gen_ff.dll) in Nullsoft Winamp before 5.552 allows remote attackers to execute arbitrary code via a crafted MAKI file, which triggers an incorrect sign extension, an integer overflow, and a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-29T22:00:00.000Z
CVE-2009-1832 
Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors involving "double frame construction."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1833 
The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1) js_LeaveSharpObject, (2) ParseXMLSource, and (3) a certain assertion in jsinterp.c; and other vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1834 
Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through \u115E characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1835 
Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with file://example.com/C:/ at the beginning.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1836 
Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1837 
Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozilla Firefox 3 before 3.0.11 might allow remote attackers to execute arbitrary code via a page transition during Java applet loading, related to a use-after-free vulnerability for memory associated with a destroyed Java object.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1838 
The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted event handler, related to an incorrect context for this event handler.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1839 
Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, which allows user-assisted remote attackers to bypass intended access restrictions and read files via a crafted HTML document, aka a "file-URL-to-file-URL scripting" attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1840 
Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web script or an advertisement in a web page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1841 
js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-12T21:07:00.000Z
CVE-2009-1842 
SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T14:00:00.000Z
CVE-2009-1843 
Multiple SQL injection vulnerabilities in Flash Quiz Beta 2 allow remote attackers to execute arbitrary SQL commands via the (1) quiz parameter to (a) num_questions.php, (b) answers.php, (c) high_score.php, (d) high_score_web.php, (e) results_table_web.php, and (f) question.php; and the (2) order_number parameter to (g) answers.php and (h) question.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T14:00:00.000Z
CVE-2009-1844 
Multiple cross-site scripting (XSS) vulnerabilities in Drupal 5.x before 5.18 and 6.x before 6.12 allow (1) remote authenticated users to inject arbitrary web script or HTML via crafted UTF-8 byte sequences that are treated as UTF-7 by Internet Explorer 6 and 7, which are not properly handled in the "HTML exports of books" feature; and (2) allow remote authenticated users with administer taxonomy permissions to inject arbitrary web script or HTML via the help text of an arbitrary vocabulary.  NOTE: vector 1 exists because of an incomplete fix for CVE-2009-1575.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T14:00:00.000Z
CVE-2009-1845 
Cross-site scripting (XSS) vulnerability in ajax/updatecheck.php in Lussumo Vanilla 1.1.5 and 1.1.7 allows remote attackers to inject arbitrary web script or HTML via the RequestName parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1846 
Multiple directory traversal vulnerabilities in SiteX 0.7.4 Build 418 and earlier allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the THEME_FOLDER parameter to (1) Corporate/homepage.php, (2) Fusion/homepage.php, (3) Joombo/homepage.php, (4) Streamline/homepage.php, and (5) Structure/homepage.php in themes/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1847 
Directory traversal vulnerability in index.php in Easy PX 41 CMS 9.0 B1 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the fiche parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1848 
SQL injection vulnerability in the JoomlaMe AgoraGroups (aka AG or com_agoragroup) component 0.3.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a groupdetail action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1849 
Cross-site scripting (XSS) vulnerability in the Monitor_Bandwidth function in PRTG Traffic Grapher 6.2.2.977 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1850 
SQL injection vulnerability in index.php in phpBugTracker 1.0.3 allows remote attackers to execute arbitrary SQL commands via the password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1851 
SQL injection vulnerability in include.php in phpBugTracker 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via the username parameter.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1852 
Multiple SQL injection vulnerabilities in Graphiks MyForum 1.3 allow remote attackers to execute arbitrary SQL commands via the (1) Username and (2) Password fields.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1853 
Multiple SQL injection vulnerabilities in index.php in Kensei Board 2.0 BETA (aka 2.0.0b) and earlier allow remote attackers to execute arbitrary SQL commands via the (1) f and (2) t parameters in a showforum action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1854 
Million Dollar Text Links 1.0 allows remote attackers to bypass authentication and gain administrative access by setting the userid cookie to 1.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-01T19:00:00.000Z
CVE-2009-1855 
Stack-based buffer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via a PDF file containing a malformed U3D model file with a crafted extension block.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1856 
Integer overflow in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allows attackers to cause a denial of service or possibly execute arbitrary code via a PDF file containing unspecified parameters to the FlateDecode filter, which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1857 
Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 allow attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a PDF document with a crafted TrueType font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1858 
The JBIG2 filter in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1859 
Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow attackers to execute arbitrary code via unspecified vectors that trigger memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1860 
Unspecified vulnerability in Adobe Shockwave Player before 11.5.0.600 allows remote attackers to execute arbitrary code via crafted Shockwave Player 10 content.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-24T22:00:00.000Z
CVE-2009-1861 
Multiple heap-based buffer overflows in Adobe Reader 7 and Acrobat 7 before 7.1.3, Adobe Reader 8 and Acrobat 8 before 8.1.6, and Adobe Reader 9 and Acrobat 9 before 9.1.2 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file with a JPX (aka JPEG2000) stream that triggers heap memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-11T15:00:00.000Z
CVE-2009-1862 
Unspecified vulnerability in Adobe Reader and Acrobat 9.x through 9.1.2, and Adobe Flash Player 9.x through 9.0.159.0 and 10.x through 10.0.22.87, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (1) a crafted Flash application in a .pdf file or (2) a crafted .swf file, related to authplay.dll, as exploited in the wild in July 2009.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-23T20:00:00.000Z
CVE-2009-1863 
Unspecified vulnerability in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors, related to a "privilege escalation vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1864 
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1865 
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors, related to a "null pointer vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1866 
Stack-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1867 
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to trick a user into (1) selecting a link or (2) completing a dialog, related to a "clickjacking vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1868 
Heap-based buffer overflow in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors involving URL parsing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1869 
Integer overflow in the ActionScript Virtual Machine 2 (AVM2) abcFile parser in Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an AVM2 file with a large intrf_count value that triggers a dereference of an out-of-bounds pointer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1870 
Adobe Flash Player before 9.0.246.0 and 10.x before 10.0.32.18, and Adobe AIR before 1.5.2, allows attackers to obtain sensitive information via vectors involving saving an SWF file to a hard drive, related to a "local sandbox vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-31T19:00:00.000Z
CVE-2009-1872 
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1873 
Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1874 
Multiple cross-site scripting (XSS) vulnerabilities in the Management Console in Adobe JRun 4.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1875 
Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion 8.0.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1877.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1876 
Adobe ColdFusion 8.0.1 and earlier might allow attackers to obtain sensitive information via unspecified vectors, related to a "double-encoded null character vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1877 
Cross-site scripting (XSS) vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2009-1875.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1878 
Session fixation vulnerability in Adobe ColdFusion 8.0.1 and earlier allows remote attackers to hijack web sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-18T22:00:00.000Z
CVE-2009-1879 
Cross-site scripting (XSS) vulnerability in index.template.html in the express-install templates in the SDK in Adobe Flex before 3.4, when the installed Flash version is older than a specified requiredMajorVersion value, allows remote attackers to inject arbitrary web script or HTML via the query string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-21T17:00:00.000Z
CVE-2009-1880 
Cross-site scripting (XSS) vulnerability in MT312 REP-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to (1) model.php and (2) config.php with timestamps before 20090521.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T15:00:00.000Z
CVE-2009-1881 
Cross-site scripting (XSS) vulnerability in MT312 IMG-BBS allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to model.php with a timestamp before 20090521.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T15:00:00.000Z
CVE-2009-1882 
Integer overflow in the XMakeImage function in magick/xwindow.c in ImageMagick 6.5.2-8, and GraphicsMagick, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted TIFF file, which triggers a buffer overflow.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T15:00:00.000Z
CVE-2009-1883 
The z90crypt_unlocked_ioctl function in the z90crypt driver in the Linux kernel 2.6.9 does not perform a capability check for the Z90QUIESCE operation, which allows local users to leverage euid 0 privileges to force a driver outage.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-18T10:00:00.000Z
CVE-2009-1884 
Off-by-one error in the bzinflate function in Bzip2.xs in the Compress-Raw-Bzip2 module before 2.018 for Perl allows context-dependent attackers to cause a denial of service (application hang or crash) via a crafted bzip2 compressed stream that triggers a buffer overflow, a related issue to CVE-2009-1391.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-19T17:00:00.000Z
CVE-2009-1885 
Stack consumption vulnerability in validators/DTD/DTDScanner.cpp in Apache Xerces C++ 2.7.0 and 2.8.0 allows context-dependent attackers to cause a denial of service (application crash) via vectors involving nested parentheses and invalid byte values in "simply nested DTD structures," as demonstrated by the Codenomicon XML fuzzing framework.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-11T18:00:00.000Z