rainbutterfly/cve_corpus huggingface dataset:
CVE-2009-3311 
Cross-site scripting (XSS) vulnerability in index.php in RSSMediaScript allows remote attackers to inject arbitrary web script or HTML via the page parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3312 
PHP remote file inclusion vulnerability in php/init.poll.php in phpPollScript 1.3 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a crafted URL in the include_class parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3313 
Multiple SQL injection vulnerabilities in FMyClone 2.3 allow remote attackers to execute arbitrary SQL commands via the comp parameter to (1) index.php and (2) editComments.php, and (3) allow remote authenticated administrators to execute arbitrary SQL commands via the id parameter in a comment action to edit.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3314 
SQL injection vulnerability in ladders.php in Elite Gaming Ladders 3.2 allows remote attackers to execute arbitrary SQL commands via the platform parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3315 
SQL injection vulnerability in admin/index.php in NeLogic Nephp Publisher Enterprise 3.5.9 and 4.5 allows remote attackers to execute arbitrary SQL commands via the Username field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3316 
SQL injection vulnerability in the JReservation (com_jreservation) component 1.0 and 1.5 for Joomla! allows remote attackers to execute arbitrary SQL commands via the pid parameter in a propertycpanel action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3317 
PHP remote file inclusion vulnerability in pages/pageHeader.php in OpenSiteAdmin 0.9.7 BETA allows remote attackers to execute arbitrary PHP code via a URL in the path parameter, a different vector than CVE-2008-0648.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3318 
Directory traversal vulnerability in the Roland Breedveld Album (com_album) component 1.14 for Joomla! allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3319 
SQL injection vulnerability in poems.php in DCI-Designs Dawaween 1.03 allows remote attackers to execute arbitrary SQL commands via the id parameter in a sec list action, a different vector than CVE-2006-1018.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3320 
Cross-site scripting (XSS) vulnerability in scrivi.php in Zenas PaoLink (aka Pao-Link) 1.0 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3321 
SQL injection vulnerability in SaphpLesson 4.3, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the CLIENT_IP HTTP header.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3322 
The Siemens Gigaset SE361 WLAN router allows remote attackers to cause a denial of service (device reboot) via a flood of crafted TCP packets to port 1723.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3323 
Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini (BAROSmini) 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the baros_path parameter to (1) include/common_functions.php, and the main_path parameter to (2) lib_users.php, (3) lib_stats.php, and (4) lib_slots.php in include/lib/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3324 
PHP remote file inclusion vulnerability in include/prodler.class.php in ProdLer 2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sPath parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3325 
SQL injection vulnerability in the Focusplus Developments Survey Manager (com_surveymanager) component 1.5.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the stype parameter in an editsurvey action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3326 
SQL injection vulnerability in index.php in CMScontrol Content Management System 7.x allows remote attackers to execute arbitrary SQL commands via the id_menu parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3327 
Multiple SQL injection vulnerabilities in WX-Guestbook 1.1.208 allow remote attackers to execute arbitrary SQL commands via the (1) QUERY parameter to search.php and (2) USERNAME parameter to login.php.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3328 
Cross-site scripting (XSS) vulnerability in sign.php in WX-Guestbook 1.1.208 allows remote attackers to inject arbitrary web script or HTML via the sName parameter (aka the name field).  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3329 
Stack-based buffer overflow in Winplot 1.25.0.1 allows user-assisted remote attackers to execute arbitrary code via a crafted Plot2D (.wp2) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3330 
SQL injection vulnerability in index.php in cP Creator 2.7.1, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the tickets parameter in a support ticket action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3331 
Multiple PHP remote file inclusion vulnerabilities in DDL CMS 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the wwwRoot parameter to (1) header.php, (2) submit.php, (3) submitted.php, and (4) autosubmitter/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3332 
SQL injection vulnerability in the JBudgetsMagic (com_jbudgetsmagic) component 0.3.2 through 0.4.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the bid parameter in a mybudget action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3333 
PHP remote file inclusion vulnerability in koesubmit.php in the koeSubmit (com_koesubmit) component 1.0 for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3334 
SQL injection vulnerability in the Lhacky! Extensions Cave Joomla! Integrated Newsletters Component (aka JINC or com_jinc) component 0.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the newsid parameter in a messages action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-23T10:00:00.000Z
CVE-2009-3335 
SQL injection vulnerability in the TurtuShout component 0.11 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Name field.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3336 
SQL injection vulnerability in auction_details.php in PHP Pro Bid allows remote attackers to execute arbitrary SQL commands via the auction_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3337 
SQL injection vulnerability in the Freetag (serendipity_event_freetag) plugin before 3.09 for Serendipity (S9Y) allows remote attackers to execute arbitrary SQL commands via an unspecified parameter associated with Meta keywords in a blog entry.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3338 
Stack-based buffer overflow in EffectMatrix (E.M.) Magic Morph 1.95b allows remote attackers to execute arbitrary code via a long string in a .mor file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3339 
Unspecified vulnerability in McAfee Email and Web Security Appliance 5.1 VMtrial allows remote attackers to read arbitrary files via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.9 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3340 
Unspecified vulnerability in FreeSSHD 1.2.4 allows remote attackers to cause a denial of service via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3341 
Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3342 
SQL injection vulnerability in frontend/assets/ajax/checkusername.php in the AlphaUserPoints (com_alphauserpoints) component 1.5.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the username2points parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3343 
SQL injection vulnerability in details.asp in HotWeb Rentals allows remote attackers to execute arbitrary SQL commands via the PropId parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3344 
Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3345 
Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3346 
Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3347 
Buffer overflow on the D-Link DIR-400 wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.10 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3348 
Cross-site scripting (XSS) vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3349 
SQL injection vulnerability in Datavore Gyro 5.0 allows remote attackers to execute arbitrary SQL commands via the cid parameter in a cat action to the home component.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3350 
Multiple unspecified vulnerabilities in the Subdomain Manager module for Drupal have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3351 
Multiple unspecified vulnerabilities in the Node Browser module for Drupal have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3352 
Multiple unspecified vulnerabilities in the quota_by_role (Quota by role) module for Drupal have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3353 
Multiple unspecified vulnerabilities in the Node2Node module for Drupal have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3354 
Multiple unspecified vulnerabilities in the Rest API module for Drupal have unknown impact and attack vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3355 
Cross-site scripting (XSS) vulnerability in profile.php in Datetopia Buy Dating Site 1.0 allows remote attackers to inject arbitrary web script or HTML via the s_r parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3356 
SQL injection vulnerability in index.php in Image voting 1.0 allows remote attackers to execute arbitrary SQL commands via the show parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3357 
Multiple SQL injection vulnerabilities in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allow remote attackers to execute arbitrary SQL commands via the (1) h_id, (2) id, and (3) rid parameters to longDesc.php, and the h_id parameter to (4) detail.php, (5) detail1.php, (6) detail2.php, (7) detail3.php, (8) detail4.php, (9) detail5.php, (10) detail6.php, (11) detail7.php, and (12) detail8.php, different vectors than CVE-2008-5865, CVE-2008-5874, and CVE-2008-5875.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3358 
SQL injection vulnerability in profile.php in Tourism Scripts Adult Portal escort listing allows remote attackers to execute arbitrary SQL commands via the user_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3359 
Multiple cross-site scripting (XSS) vulnerabilities in Match Agency BiZ 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) important parameter to edit_profile.php and (2) pid parameter to report.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3360 
Multiple cross-site scripting (XSS) vulnerabilities in Datemill 1.0 allow remote attackers to inject arbitrary web script or HTML via the (1) return parameter to photo_view.php, and st parameter to (2) photo_search.php and (3) search.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3361 
SQL injection vulnerability in index.php in PHP-IPNMonitor allows remote attackers to execute arbitrary SQL commands via the maincat_id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3362 
PHP remote file inclusion vulnerability in printnews.php3 in SZNews 2.7 allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3363 
Cross-site scripting (XSS) vulnerability in the BUEditor module 5.x before 5.x-1.2 and 6.x before 6.x-1.4, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via input to the "plain textarea editor."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3364 
Stack-based buffer overflow in FTPShell Client 4.1 RC2 allows remote FTP servers to execute arbitrary code via a long response to a PASV command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3365 
PHP remote file inclusion vulnerability in add-ons/modules/sysmanager/plugins/install.plugin.php in Aurora CMS 1.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the AURORA_MODULES_FOLDER parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3366 
Directory traversal vulnerability in navigation.php in An image gallery 1.0 allows remote attackers to list arbitrary directories via a .. (dot dot) in the path parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3367 
Multiple cross-site scripting (XSS) vulnerabilities in An image gallery 1.0 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) index.php and (2) main.php, and the (3) show parameter to main.php.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3368 
Cross-site scripting (XSS) vulnerability in the Hotel Booking Reservation System (aka HBS or com_hbssearch) component for Joomla! allows remote attackers to inject arbitrary web script or HTML via the adult parameter in a showhoteldetails action to index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3369 
CgiUserConfigEdit in BackupPC 3.1.0, when SSH keys and Rsync are in use in a multi-user environment, does not restrict users from the ClientNameAlias function, which allows remote authenticated users to read and write sensitive files by modifying ClientNameAlias to match another system, then initiating a backup or restore.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-09-24T16:00:00.000Z
CVE-2009-3370 
Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse and keyboard events that leverage the auto-fill feature to populate form fields, in an attacker-readable form, with history entries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3371 
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code by creating JavaScript web-workers recursively.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3372 
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via a crafted regular expression in a Proxy Auto-configuration (PAC) file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3373 
Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3374 
The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 does not enforce intended restrictions on interaction between chrome privileged code and objects obtained from remote web sites, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via unspecified method calls, related to "doubly-wrapped objects."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3375 
content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3376 
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z
CVE-2009-3377 
Multiple unspecified vulnerabilities in liboggz before cf5feeaab69b05e24, as used in Mozilla Firefox 3.5.x before 3.5.4, allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2009-10-29T14:00:00.000Z