rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-0128 
plugins/crypto/openssl/crypto_openssl.c in Simple Linux Utility for Resource Management (aka SLURM or slurm-llnl) does not properly check the return value from the OpenSSL EVP_VerifyFinal function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0129 
libcrypt-openssl-dsa-perl does not properly check the return value from the OpenSSL DSA_verify and DSA_do_verify functions, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0130 
lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value from the OpenSSL DSA_do_verify function, which might allow remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077.  NOTE: a package maintainer disputes this issue, reporting that there is a proper check within the only code that uses the applicable part of crypto_drv.c, and thus "this report is invalid.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0131 
The UFS implementation in the kernel in Sun OpenSolaris snv_29 through snv_90 allows local users to cause a denial of service (panic) via the single posix_fallocate test in the SUSv3 POSIX test suite, related to an F_ALLOCSP fcntl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0132 
Integer overflow in the aio_suspend function in Sun Solaris 8 through 10 and OpenSolaris, when 32-bit mode is enabled, allows local users to cause a denial of service (panic) via a large integer value in the second argument (aka nent argument).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0133 
Buffer overflow in Microsoft HTML Help Workshop 4.74 and earlier allows context-dependent attackers to execute arbitrary code via a .hhp file with a long "Index file" field, possibly a related issue to CVE-2006-0564.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-15T17:00:00.000Z
CVE-2009-0134 
Insecure method vulnerability in the EasyGrid.SGCtrl.32 ActiveX control in EasyGrid.ocx 1.0.0.1 in AAA EasyGrid ActiveX 3.51 allows remote attackers to create and overwrite arbitrary files via the (1) DoSaveFile or (2) DoSaveHtmlFile method.  NOTE: vector 1 could be leveraged for code execution by creating executable files in Startup folders or by accessing files using hcp:// URLs.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T18:00:00.000Z
CVE-2009-0135 
Multiple integer overflows in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to execute arbitrary code via an Audible Audio (.aa) file with a large (1) nlen or (2) vlen Tag value, each of which triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T18:00:00.000Z
CVE-2009-0136 
Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via an Audible Audio (.aa) file with a crafted (1) nlen or (2) vlen Tag value, each of which can lead to an invalid pointer dereference, or the writing of a 0x00 byte to an arbitrary memory location, after an allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T18:00:00.000Z
CVE-2009-0137 
Multiple unspecified vulnerabilities in Safari RSS in Apple Mac OS X 10.4.11 and 10.5.6, and Windows XP and Vista, allow remote attackers to execute arbitrary JavaScript in the local security zone via a crafted feed: URL, related to "input validation issues."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-13T00:00:00.000Z
CVE-2009-0138 
servermgrd (Server Manager) in Apple Mac OS X 10.5.6 does not properly validate authentication credentials, which allows remote attackers to modify the system configuration.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-13T00:00:00.000Z
CVE-2009-0139 
Integer overflow in the SMB component in Apple Mac OS X 10.5.6 allows remote SMB servers to cause a denial of service (system shutdown) or execute arbitrary code via a crafted SMB file system that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-13T00:00:00.000Z
CVE-2009-0140 
Unspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote SMB servers to cause a denial of service (memory exhaustion and system shutdown) via a crafted file system name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-13T00:00:00.000Z
CVE-2009-0141 
XTerm in Apple Mac OS X 10.4.11 and 10.5.6, when used with luit, creates tty devices with insecure world-writable permissions, which allows local users to write to the Xterm of another user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-13T00:00:00.000Z
CVE-2009-0142 
Race condition in AFP Server in Apple Mac OS X 10.5.6 allows local users to cause a denial of service (infinite loop) via unspecified vectors related to "file enumeration logic."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-12T23:00:00.000Z
CVE-2009-0143 
Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-14T18:00:00.000Z
CVE-2009-0144 
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0145 
CoreGraphics in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0146 
Multiple buffer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2SymbolDict::setBitmap and (2) JBIG2Stream::readSymbolDictSeg.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-23T17:00:00.000Z
CVE-2009-0147 
Multiple integer overflows in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allow remote attackers to cause a denial of service (crash) via a crafted PDF file, related to (1) JBIG2Stream::readSymbolDictSeg, (2) JBIG2Stream::readSymbolDictSeg, and (3) JBIG2Stream::readGenericBitmap.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-23T17:00:00.000Z
CVE-2009-0148 
Multiple buffer overflows in Cscope before 15.7a allow remote attackers to execute arbitrary code via long strings in input such as (1) source-code tokens and (2) pathnames, related to integer overflows in some cases. NOTE: this issue exists because of an incomplete fix for CVE-2004-2541.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-05T17:00:00.000Z
CVE-2009-0149 
Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0150 
Stack-based buffer overflow in Apple Mac OS X 10.5 before 10.5.7 allows local users to gain privileges or cause a denial of service (application crash) by attempting to mount a crafted sparse disk image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0151 
The screen saver in Dock in Apple Mac OS X 10.5 before 10.5.8 does not prevent four-finger Multi-Touch gestures, which allows physically proximate attackers to bypass locking and "manage applications or use Expose" via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-08-06T15:00:00.000Z
CVE-2009-0152 
iChat in Apple Mac OS X 10.5 before 10.5.7 disables SSL for AOL Instant Messenger (AIM) communication in certain circumstances that are inconsistent with the Require SSL setting, which allows remote attackers to obtain sensitive information by sniffing the network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0153 
International Components for Unicode (ICU) 4.0, 3.6, and other 3.x versions, as used in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, iPhone OS for iPod touch 1.1 through 2.2.1, Fedora 9 and 10, and possibly other operating systems, does not properly handle invalid byte sequences during Unicode conversion, which might allow remote attackers to conduct cross-site scripting (XSS) attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0154 
Heap-based buffer overflow in Apple Type Services (ATS) in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code via a crafted Compact Font Format (CFF) font.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0155 
Integer underflow in CoreGraphics in Apple Mac OS X 10.5 before 10.5.7, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PDF file that triggers a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0156 
Launch Services in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to cause a denial of service (persistent Finder crash) via a crafted Mach-O executable that triggers an out-of-bounds memory read.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0157 
Heap-based buffer overflow in CFNetwork in Apple Mac OS X 10.5 before 10.5.7 allows remote web servers to execute arbitrary code or cause a denial of service (application crash) via long HTTP headers.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0158 
Stack-based buffer overflow in telnet in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long hostname for a telnet server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0159 
Stack-based buffer overflow in the cookedprint function in ntpq/ntpq.c in ntpq in NTP before 4.2.4p7-RC2 allows remote NTP servers to execute arbitrary code via a crafted response.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-14T15:00:00.000Z
CVE-2009-0160 
QuickDraw Manager in Apple Mac OS X 10.4.11 and 10.5 before 10.5.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image that triggers memory corruption.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0161 
The OpenSSL::OCSP module for Ruby in Apple Mac OS X 10.5 before 10.5.7 misinterprets an unspecified invalid response as a successful OCSP certificate validation, which might allow remote attackers to spoof certificate authentication via a revoked certificate.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0162 
Cross-site scripting (XSS) vulnerability in Safari before 3.2.3, and 4 Public Beta, on Apple Mac OS X 10.5 before 10.5.7 and Windows allows remote attackers to inject arbitrary web script or HTML via a crafted feed: URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-05-13T15:14:00.000Z
CVE-2009-0163 
Integer overflow in the TIFF image decoding routines in CUPS 1.3.9 and earlier allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via a crafted TIFF image, which is not properly handled by the (1) _cupsImageReadTIFF function in the imagetops filter and (2) imagetoraster filter, leading to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-23T17:00:00.000Z
CVE-2009-0164 
The web interface for CUPS before 1.3.10 does not validate the HTTP Host header in a client request, which makes it easier for remote attackers to conduct DNS rebinding attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-24T15:00:00.000Z
CVE-2009-0165 
Integer overflow in the JBIG2 decoder in Xpdf 3.02pl2 and earlier, as used in Poppler and other products, when running on Mac OS X, has unspecified impact, related to "g*allocn."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-23T19:11:00.000Z
CVE-2009-0166 
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-04-23T17:00:00.000Z
CVE-2009-0167 
Unspecified vulnerability in lpadmin in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to enumeration of "wrong printers," aka a "Temporary file vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0168 
Unspecified vulnerability in ppdmgr in Sun Solaris 10 and OpenSolaris snv_61 through snv_106 allows local users to cause a denial of service via unspecified vectors, related to a failure to "include all cache files," and improper handling of temporary files.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0169 
Sun Java System Access Manager 7.1 allows remote authenticated sub-realm administrators to gain privileges, as demonstrated by creating the amadmin account in the sub-realm, and then logging in as amadmin in the root realm.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0170 
Sun Java System Access Manager 6.3 2005Q1, 7 2005Q4, and 7.1 allows remote authenticated users with console privileges to discover passwords, and obtain unspecified other "access to resources," by visiting the Configuration Items component in the console.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0171 
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0172 
Unspecified vulnerability in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote attackers to cause a denial of service (infinite loop) via a crafted CONNECT data stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0173 
Unspecified vulnerability in the server in IBM DB2 8 before FP17a, 9.1 before FP6a, and 9.5 before FP3a allows remote authenticated users to cause a denial of service (trap) via a crafted data stream.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-16T21:00:00.000Z
CVE-2009-0174 
Stack-based buffer overflow in VUPlayer 2.49 allows remote attackers to execute arbitrary code via a long .asf URI in the HREF attribute of a REF element in a .asx file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T15:26:00.000Z
CVE-2009-0175 
Heap-based buffer overflow in Heathco Software MP3 TrackMaker 1.5 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a long string in an invalid .mp3 file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T15:26:00.000Z
CVE-2009-0176 
Multiple heap-based buffer overflows in the PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.1.3 through 4.1.6, BlackBerry Professional Software 4.1.4, and BlackBerry Unite! before 1.0.3 bundle 28 allow user-assisted remote attackers to execute arbitrary code via (1) a crafted stream in a .pdf file, related to "symWidths"; or (2) a crafted data stream in a .pdf file, related to "bitmaps."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T15:26:00.000Z
CVE-2009-0177 
vmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation 6.5.1 build 126130, 6.5.1 and earlier; VMware Player 2.5.1 build 126130, 2.5.1 and earlier; VMware ACE 2.5.1 and earlier; VMware Server 2.0.x before 2.0.1 build 156745; and VMware Fusion before 2.0.2 build 147997 allows remote attackers to cause a denial of service (daemon crash) via a long (1) USER or (2) PASS command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T15:26:00.000Z
CVE-2009-0178 
Unspecified vulnerability in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 has unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2009-0179 
libmikmod 3.1.11 through 3.2.0, as used by MikMod and possibly other products, allows user-assisted attackers to cause a denial of service (application crash) by loading an XM file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2009-0180 
Certain Fedora build scripts for nfs-utils before 1.1.2-9.fc9 on Fedora 9, and before 1.1.4-6.fc10 on Fedora 10, omit TCP Wrapper support, which might allow remote attackers to bypass intended access restrictions, possibly a related issue to CVE-2008-1376.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2009-0181 
Buffer overflow in VUPlayer allows user-assisted attackers to have an unknown impact via a long file, as demonstrated by a file composed entirely of 'A' characters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2009-0182 
Buffer overflow in VUPlayer 2.49 and earlier allows user-assisted attackers to execute arbitrary code via a long URL in a File line in a .pls file, as demonstrated by an http URL on a File1 line.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-01-20T16:00:00.000Z
CVE-2009-0183 
Stack-based buffer overflow in Remote Control Server in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allows remote attackers to execute arbitrary code via a long Authorization header in an HTTP request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-03T19:00:00.000Z
CVE-2009-0184 
Multiple buffer overflows in the torrent parsing implementation in Free Download Manager (FDM) 2.5 Build 758 and 3.0 Build 844 allow remote attackers to execute arbitrary code via (1) a long file name within a torrent file, (2) a long tracker URL in a torrent file, or (3) a long comment in a torrent file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-03T19:00:00.000Z
CVE-2009-0185 
Heap-based buffer overflow in Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted MS ADPCM encoded audio data in an AVI movie file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T18:00:00.000Z
CVE-2009-0186 
Integer overflow in libsndfile 1.0.18, as used in Winamp and other products, allows context-dependent attackers to execute arbitrary code via crafted description chunks in a CAF audio file, leading to a heap-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-05T02:00:00.000Z
CVE-2009-0187 
Stack-based buffer overflow in Orbit Downloader 2.8.2 and 2.8.3, and possibly other versions before 2.8.5, allows remote attackers to execute arbitrary code via a crafted HTTP URL with a long host name, which is not properly handled when constructing a "Connecting" log message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-02-26T16:00:00.000Z
CVE-2009-0188 
Apple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie composed of a Sorenson 3 video file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-06-02T18:00:00.000Z
CVE-2009-0191 
Foxit Reader 2.3 before Build 3902 and 3.0 before Build 1506, including 3.0.2009.1301, does not properly handle a JBIG2 symbol dictionary segment with zero new symbols, which allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a dereference of an uninitialized memory location.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-03-10T20:00:00.000Z
CVE-2009-0192 
Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers to execute arbitrary code via an HTTP request with a crafted Accept-Language header, which triggers a stack-based buffer overflow.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-07-14T20:16:00.000Z