rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-0505 
Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0506 
Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0507 
Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0508 
Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0509 
SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0510 
Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0511 
Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0512 
The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0513 
Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0514 
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0515 
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0516 
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0517 
Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0518 
QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0519 
Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0520 
Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0521 
Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0522 
Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0523 
Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0524 
The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0525 
Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail recipient, which might make it easier for remote attackers to obtain sensitive information via a brute-force attack on a weakly encrypted e-mail message.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0526 
Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during decompression.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0527 
Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0528 
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0529 
Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0530 
Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-09T19:00:00.000Z
CVE-2010-0531 
Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0532 
Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0533 
Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T17:00:00.000Z
CVE-2010-0534 
Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0535 
Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0536 
Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-31T18:00:00.000Z
CVE-2010-0537 
DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-03-30T18:00:00.000Z
CVE-2010-0538 
Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLibImage objects, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted applet, related to the com.sun.medialib.mlib package.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-21T19:00:00.000Z
CVE-2010-0539 
Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-05-21T19:00:00.000Z
CVE-2010-0540 
Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-0541 
Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-0542 
The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-21T16:00:00.000Z
CVE-2010-0543 
ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-0544 
Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to a malformed URL.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-11T19:00:00.000Z
CVE-2010-0545 
The Finder in DesktopServices in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, does not set the expected file ownerships during an "Apply to enclosed items" action, which allows local users to bypass intended access restrictions via normal filesystem operations.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-0546 
Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-06-17T16:00:00.000Z
CVE-2010-0547 
client/mount.cifs.c in mount.cifs in smbfs in Samba 3.4.5 and earlier does not verify that the (1) device name and (2) mountpoint strings are composed of valid characters, which allows local users to cause a denial of service (mtab corruption) via a crafted string.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T18:00:00.000Z
CVE-2010-0548 
Multiple unspecified vulnerabilities in the Network Controller and Web Server in Xerox WorkCentre 5632, 5638, 5645, 5655, 5665, 5675, and 5687 allow remote attackers to (1) access mailboxes via unknown vectors that bypass Scan to Mailbox authorization or (2) read device configuration information via via unknown vectors that bypass web server authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0549 
Unspecified vulnerability in the Network Controller in Xerox WorkCentre 6400 System Software 060.070.109.11407 through 060.070.109.29510, and Net Controller 060.079.11410 through 060.079.29310, allows remote attackers to access "directory structure" via a crafted PostScript file, aka "Unauthorized Directory Structure Access Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0550 
admin.htm in Geo++ GNCASTER 1.4.0.7 and earlier does not properly enforce HTTP Digest Authentication, which allows remote authenticated users to use HTTP Basic Authentication, bypassing intended server policy.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0551 
HTTP authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to read authentication headers of other users via a large request with an incorrect authentication attempt, which includes sensitive memory in the response.  NOTE: this is referred to as a "memory leak" by some sources, but is better characterized as "memory disclosure."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0552 
Geo++ GNCASTER 1.4.0.7 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via multiple requests for a non-existent file using a long URI.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0553 
Geo++ GNCASTER 1.4.0.7 and earlier allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via a long NMEA data sentence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0554 
The HTTP Authentication implementation in Geo++ GNCASTER 1.4.0.7 and earlier uses the same nonce for all authentication, which allows remote attackers to hijack web sessions or bypass authentication via a replay attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T19:00:00.000Z
CVE-2010-0555 
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content type for files that are encountered after a redirection, aka the URLMON sniffing vulnerability, a variant of CVE-2009-1140 and related to CVE-2008-1448.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-04T20:00:00.000Z
CVE-2010-0556 
browser/login/login_prompt.cc in Google Chrome before 4.0.249.89 populates an authentication dialog with credentials that were stored by Password Manager for a different web site, which allows user-assisted remote HTTP servers to obtain sensitive information via a URL that requires authentication, as demonstrated by a URL in the SRC attribute of an IMG element.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-18T17:00:00.000Z
CVE-2010-0557 
IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-05T22:13:00.000Z
CVE-2010-0558 
The default configuration of Oracle OpenSolaris snv_77 through snv_131 allows attackers to have an unspecified impact via vectors related to using smbadm to join a Windows Active Directory domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-05T22:13:00.000Z
CVE-2010-0559 
The default configuration of Oracle OpenSolaris snv_91 through snv_131 allows attackers to have an unspecified impact via vectors related to using kclient to join a Windows Active Directory domain.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-05T22:13:00.000Z
CVE-2010-0560 
Unspecified vulnerability in the BIOS in Intel Desktop Board DB, DG, DH, DP, and DQ Series allows local administrators to execute arbitrary code in System Management Mode (SSM) via unknown attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-08T21:00:00.000Z
CVE-2010-0561 
Integer signedness error in NetBSD 4.0, 5.0, and NetBSD-current before 2010-01-21 allows local users to cause a denial of service (kernel panic) via a negative mixer index number being passed to (1) the azalia_query_devinfo function in the azalia audio driver (src/sys/dev/pci/azalia.c) or (2) the hdaudio_afg_query_devinfo function in the hdaudio audio driver (src/sys/dev/pci/hdaudio/hdaudio_afg.c).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-08T21:00:00.000Z
CVE-2010-0562 
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via an SSL X.509 certificate containing non-printable characters with the high bit set, which triggers a heap-based buffer overflow during escaping.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-08T21:00:00.000Z
CVE-2010-0563 
The Single Sign-on (SSO) functionality in IBM WebSphere Application Server (WAS) 7.0.0.0 through 7.0.0.8 does not recognize the Requires SSL configuration option, which might allow remote attackers to obtain sensitive information by sniffing network sessions that were expected to be encrypted.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-08T21:00:00.000Z
CVE-2010-0564 
Buffer overflow in Trend Micro URL Filtering Engine (TMUFE) in OfficeScan 8.0 before SP1 Patch 5 - Build 3510, possibly tmufeng.dll before 3.0.0.1029, allows attackers to cause a denial of service (crash or OfficeScan hang) via unspecified vectors.  NOTE: it is likely that this issue also affects tmufeng.dll before 2.0.0.1049 for OfficeScan 10.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-10T02:00:00.000Z
CVE-2010-0565 
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10), allows remote attackers to cause a denial of service (page fault and device reload) via a malformed DTLS message, aka Bug ID CSCtb64913 and "WebVPN DTLS Denial of Service Vulnerability."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-19T17:00:00.000Z
CVE-2010-0566 
Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(4.44), 8.1 before 8.1(2.35), and 8.2 before 8.2(1.10) allows remote attackers to cause a denial of service (device reload) via a malformed TCP segment when certain NAT translation and Cisco AIP-SSM configurations are used, aka Bug ID CSCtb37219.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-02-19T17:00:00.000Z