rainbutterfly/cve_corpus huggingface dataset:
CVE-2010-4096 
share/ma/keys_for_user in Monkeysphere 0.31 and 0.32 allows local users to execute arbitrary code via unknown manipulations related to the "monkeysphere-authentication keys-for-user" command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-27T18:00:00.000Z
CVE-2010-4097 
Multiple cross-site scripting (XSS) vulnerabilities in index.php in Aardvark Topsites PHP 5.2.0 and 5.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) mail, (2) title, (3) u, and (4) url parameters.  NOTE: the q parameter is already covered by CVE-2009-2302.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-27T18:00:00.000Z
CVE-2010-4098 
monotone before 0.48.1, when configured to allow remote commands, allows remote attackers to cause a denial of service (crash) via an empty argument to the mtn command.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-27T18:00:00.000Z
CVE-2010-4099 
ess.pm in NitroSecurity NitroView ESM 8.4.0a, when ESSPMDebug is enabled, allows remote attackers to execute arbitrary commands via shell metacharacters in the Request parameter to ess.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-27T18:00:00.000Z
CVE-2010-4100 
Unspecified vulnerability in HP Insight Control Performance Management before 6.1 update 2 allows remote attackers to read arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4101 
Cross-site scripting (XSS) vulnerability in HP Insight Recovery before 6.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4102 
Unspecified vulnerability in HP Insight Recovery before 6.2 allows remote attackers to read arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4103 
Unspecified vulnerability in HP Insight Managed System Setup Wizard before 6.2 allows remote attackers to read arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4104 
Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to read arbitrary files via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4105 
Unspecified vulnerability in HP Insight Orchestration before 6.2 allows remote attackers to bypass intended access restrictions, and obtain sensitive information or modify data, via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4106 
Cross-site request forgery (CSRF) vulnerability in HP Insight Control for Linux before 6.2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T19:00:00.000Z
CVE-2010-4107 
The default configuration of the PJL Access value in the File System External Access settings on HP LaserJet MFP printers, Color LaserJet MFP printers, and LaserJet 4100, 4200, 4300, 5100, 8150, and 9000 printers enables PJL commands that use the device's filesystem, which allows remote attackers to read arbitrary files via a command inside a print job, as demonstrated by a directory traversal attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-17T15:00:00.000Z
CVE-2010-4108 
HP HP-UX B.11.11, B.11.23, and B.11.31 does not properly support threaded processes, which allows remote authenticated users to cause a denial of service via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-08T17:00:00.000Z
CVE-2010-4109 
Cross-site scripting (XSS) vulnerability in the Contacts Application in HP Palm webOS before 2.0 allows remote attackers to inject arbitrary web script or HTML via a crafted vCard file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-08T17:00:00.000Z
CVE-2010-4110 
Unspecified vulnerability in HP OpenVMS 8.3, 8.3-1H1, and 8.4 on the Itanium platform on Integrity servers allows local users to gain privileges or cause a denial of service via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4111 
Cross-site scripting (XSS) vulnerability in HP Insight Diagnostics Online Edition before 8.5.1.3712 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4112 
HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4113 
Stack-based buffer overflow in HP Power Manager (HPPM) before 4.3.2 allows remote attackers to execute arbitrary code via a long Login variable to the management web server.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4114 
Cross-site scripting (XSS) vulnerability in HP Discovery & Dependency Mapping Inventory (DDMI) 2.5x, 7.5x, and 7.6x allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T20:00:00.000Z
CVE-2010-4115 
HP StorageWorks Modular Smart Array P2000 G3 firmware TS100R011, TS100R025, TS100P002, TS200R005, TS201R014, and TS201R015 installs an undocumented admin account with a default "!admin" password, which allows remote attackers to gain privileges.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-17T18:00:00.000Z
CVE-2010-4116 
Unspecified vulnerability in HP StorageWorks Storage Mirroring 5.x before 5.2.2.1771.2 allows remote attackers to execute arbitrary code via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-22T00:00:00.000Z
CVE-2010-4120 
Multiple cross-site scripting (XSS) vulnerabilities in the TAM console in IBM Tivoli Access Manager for e-business 6.1.0 before 6.1.0-TIV-TAM-FP0006 allow remote attackers to inject arbitrary web script or HTML via (1) the parm1 parameter to ivt/ivtserver, or the method parameter to (2) acl, (3) domain, (4) group, (5) gso, (6) gsogroup, (7) os, (8) pop, (9) rule, (10) user, or (11) webseal in ibm/wpm/.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T20:00:00.000Z
CVE-2010-4121 
The TCP-to-ODBC gateway in IBM Tivoli Provisioning Manager for OS Deployment 7.1.1.3 does not require authentication for SQL statements, which allows remote attackers to modify, create, or read database records via a session on TCP port 2020.  NOTE: the vendor disputes this issue, stating that the "default Microsoft Access database is not password protected because it is intended to be used for evaluation purposes only.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-10-28T20:00:00.000Z
CVE-2010-4142 
Multiple stack-based buffer overflows in DATAC RealWin 2.0 Build 6.1.8.10 and earlier allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long (1) SCPC_INITIALIZE, (2) SCPC_INITIALIZE_RF, or (3) SCPC_TXTEVENT packet. NOTE: it was later reported that 1.06 is also affected by one of these requests.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T18:00:00.000Z
CVE-2010-4143 
SQL injection vulnerability in chart.php in phpCheckZ 1.1.0, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4144 
SQL injection vulnerability in radyo.asp in Kisisel Radyo Script allows remote attackers to execute arbitrary SQL commands via the Id parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4145 
Kisisel Radyo Script stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for sevvo/eco23.mdb.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4146 
Cross-site scripting (XSS) vulnerability in Attachmate Reflection for the Web 2008 R2 (builds 10.1.569 and earlier), 2008 R1, and 9.6 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4147 
Multiple SQL injection vulnerabilities in Pentasoft Avactis Shopping Cart 1.9.1 build 8356 free edition and earlier allow remote attackers to execute arbitrary SQL commands via the User-Agent header to (1) index.php and (2) product-list.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4148 
Directory traversal vulnerability in AnyConnect 1.2.3.0, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4149 
Directory traversal vulnerability in FreshWebMaster Fresh FTP 5.36, 5.37, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.  NOTE: some of these details are obtained from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-01T23:00:00.000Z
CVE-2010-4150 
Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T21:00:00.000Z
CVE-2010-4151 
SQL injection vulnerability in misc.php in DeluxeBB 1.3, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the xthedateformat parameter in a register action, a different vector than CVE-2005-2989, CVE-2006-2503, and CVE-2009-1033.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-03T19:00:00.000Z
CVE-2010-4152 
SQL injection vulnerability in catalog/index.shtml in 4site CMS 2.6, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the cat parameter.  NOTE: the i and th vectors are already covered by CVE-2009-0646.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-03T19:00:00.000Z
CVE-2010-4153 
Directory traversal vulnerability in CrossFTP Pro 1.65a, and probably earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-03T19:00:00.000Z
CVE-2010-4154 
Directory traversal vulnerability in Rhino Software, Inc. FTP Voyager 15.2.0.11, and possibly earlier, allows remote FTP servers to write arbitrary files via a "..\" (dot dot backslash) in a filename.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-03T19:00:00.000Z
CVE-2010-4155 
Multiple cross-site scripting (XSS) vulnerabilities in eXV2 CMS 2.10 allow remote attackers to inject arbitrary web script or HTML via the (1) rssfeedURL parameter to manual/caferss/example.php and the sumb parameter to (2) modules/news/archive.php, (3) modules/news/topics.php, and (4) modules/contact/index.php, different vectors than CVE-2007-1965.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-03T19:00:00.000Z
CVE-2010-4156 
The mb_strcut function in Libmbfl 1.1.0, as used in PHP 5.3.x through 5.3.3, allows context-dependent attackers to obtain potentially sensitive information via a large value of the third parameter (aka the length parameter).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-10T01:00:00.000Z
CVE-2010-4157 
Integer overflow in the ioc_general function in drivers/scsi/gdth.c in the Linux kernel before 2.6.36.1 on 64-bit platforms allows local users to cause a denial of service (memory corruption) or possibly have unspecified other impact via a large argument in an ioctl call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-10T18:00:00.000Z
CVE-2010-4158 
The sk_run_filter function in net/core/filter.c in the Linux kernel before 2.6.36.2 does not check whether a certain memory location has been initialized before executing a (1) BPF_S_LD_MEM or (2) BPF_S_LDX_MEM instruction, which allows local users to obtain potentially sensitive information from kernel stack memory via a crafted socket filter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T18:00:00.000Z
CVE-2010-4159 
Untrusted search path vulnerability in metadata/loader.c in Mono 2.8 and earlier allows local users to gain privileges via a Trojan horse shared library in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-17T15:00:00.000Z
CVE-2010-4160 
Multiple integer overflows in the (1) pppol2tp_sendmsg function in net/l2tp/l2tp_ppp.c, and the (2) l2tp_ip_sendmsg function in net/l2tp/l2tp_ip.c, in the PPPoL2TP and IPoL2TP implementations in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (heap memory corruption and panic) or possibly gain privileges via a crafted sendto call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-07T11:00:00.000Z
CVE-2010-4161 
The udp_queue_rcv_skb function in net/ipv4/udp.c in a certain Red Hat build of the Linux kernel 2.6.18 in Red Hat Enterprise Linux (RHEL) 5 allows attackers to cause a denial of service (deadlock and system hang) by sending UDP traffic to a socket that has a crafted socket filter, a related issue to CVE-2010-4158.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-30T18:00:00.000Z
CVE-2010-4162 
Multiple integer overflows in fs/bio.c in the Linux kernel before 2.6.36.2 allow local users to cause a denial of service (system crash) via a crafted device ioctl to a SCSI device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-03T19:26:00.000Z
CVE-2010-4163 
The blk_rq_map_user_iov function in block/blk-map.c in the Linux kernel before 2.6.36.2 allows local users to cause a denial of service (panic) via a zero-length I/O request in a device ioctl to a SCSI device.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-03T19:26:00.000Z
CVE-2010-4164 
Multiple integer underflows in the x25_parse_facilities function in net/x25/x25_facilities.c in the Linux kernel before 2.6.36.2 allow remote attackers to cause a denial of service (system crash) via malformed X.25 (1) X25_FAC_CLASS_A, (2) X25_FAC_CLASS_B, (3) X25_FAC_CLASS_C, or (4) X25_FAC_CLASS_D facility data, a different vulnerability than CVE-2010-3873.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-03T19:26:00.000Z
CVE-2010-4165 
The do_tcp_setsockopt function in net/ipv4/tcp.c in the Linux kernel before 2.6.37-rc2 does not properly restrict TCP_MAXSEG (aka MSS) values, which allows local users to cause a denial of service (OOPS) via a setsockopt call that specifies a small value, leading to a divide-by-zero error or incorrect use of a signed integer.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-20T21:00:00.000Z
CVE-2010-4166 
Multiple SQL injection vulnerabilities in Joomla! 1.5.x before 1.5.22 allow remote attackers to execute arbitrary SQL commands via (1) the filter_order parameter in a com_weblinks category action to index.php, (2) the filter_order_Dir parameter in a com_weblinks category action to index.php, or (3) the filter_order_Dir parameter in a com_messages action to administrator/index.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-18T17:00:00.000Z
CVE-2010-4167 
Untrusted search path vulnerability in configure.c in ImageMagick before 6.6.5-5, when MAGICKCORE_INSTALLED_SUPPORT is defined, allows local users to gain privileges via a Trojan horse configuration file in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4168 
Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow (1) remote attackers to cause a denial of service (invalid write and daemon crash) by abruptly disconnecting during transmission of the map from the server, related to network/network_server.cpp; (2) remote attackers to cause a denial of service (invalid read and daemon crash) by abruptly disconnecting, related to network/network_server.cpp; and (3) remote servers to cause a denial of service (invalid read and application crash) by forcing a disconnection during the join process, related to network/network.cpp.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-17T15:00:00.000Z
CVE-2010-4169 
Use-after-free vulnerability in mm/mprotect.c in the Linux kernel before 2.6.37-rc2 allows local users to cause a denial of service via vectors involving an mprotect system call.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-20T21:00:00.000Z
CVE-2010-4170 
The staprun runtime tool in SystemTap 1.3 does not properly clear the environment before executing modprobe, which allows local users to gain privileges by setting the MODPROBE_OPTIONS environment variable to specify a malicious configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T21:00:00.000Z
CVE-2010-4171 
The staprun runtime tool in SystemTap 1.3 does not verify that a module to unload was previously loaded by SystemTap, which allows local users to cause a denial of service (unloading of arbitrary kernel modules).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T21:00:00.000Z
CVE-2010-4172 
Multiple cross-site scripting (XSS) vulnerabilities in the Manager application in Apache Tomcat 6.0.12 through 6.0.29 and 7.0.0 through 7.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) orderBy or (2) sort parameter to sessionsList.jsp, or unspecified input to (3) sessionDetail.jsp or (4) java/org/apache/catalina/manager/JspHelper.java, related to use of untrusted web applications.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-26T19:00:00.000Z
CVE-2010-4173 
The default configuration of libsdp.conf in libsdp 1.1.104 and earlier creates log files in /tmp, which allows local users to overwrite arbitrary files via a (1) symlink or (2) hard link attack on the libsdp.log.##### temporary file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-22T19:00:00.000Z
CVE-2010-4175 
Integer overflow in the rds_cmsg_rdma_args function (net/rds/rdma.c) in Linux kernel 2.6.35 allows local users to cause a denial of service (crash) and possibly trigger memory corruption via a crafted Reliable Datagram Sockets (RDS) request, a different vulnerability than CVE-2010-3865.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2011-01-11T01:00:00.000Z
CVE-2010-4176 
plymouth-pretrigger.sh in dracut and udev, when running on Fedora 13 and 14, sets weak permissions for the /dev/systty device file, which allows remote authenticated users to read terminal data from tty0 for local users.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T21:00:00.000Z
CVE-2010-4177 
mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.
Problem types: description: Other
Affected products: vendor: mysql-gui-tools
product: mysql-gui-tools
Published: 2019-11-12T22:23:16.000Z
CVE-2010-4178 
MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console
Problem types: description: UNKNOWN_TYPE
Affected products: vendor: MySQL-GUI-tools
product: MySQL-GUI-tools
Published: 2019-11-06T18:03:41.000Z
CVE-2010-4179 
The installation documentation for Red Hat Enterprise Messaging, Realtime and Grid (MRG) 1.3 recommends that Condor should be configured so that the MRG Management Console (cumin) can submit jobs for users, which creates a trusted channel with insufficient access control that allows local users with the ability to publish to a broker to run jobs as arbitrary users via Condor QMF plug-ins.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-07T21:00:00.000Z
CVE-2010-4180 
OpenSSL before 0.9.8q, and 1.0.x before 1.0.0c, when SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG is enabled, does not properly prevent modification of the ciphersuite in the session cache, which allows remote attackers to force the downgrade to an unintended cipher via vectors involving sniffing network traffic to discover a session identifier.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-12-06T21:00:00.000Z
CVE-2010-4181 
Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-04T18:00:00.000Z
CVE-2010-4182 
Untrusted search path vulnerability in the Data Access Objects (DAO) library (dao360.dll) in Microsoft Windows XP Professional SP3, Windows Server 2003 R2 Enterprise Edition SP3, Windows Vista Business SP1, and Windows 7 Professional allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse msjet49.dll that is located in the same folder as a file that is processed by dao360.dll.  NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-04T18:00:00.000Z
CVE-2010-4183 
Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before 4.1.0, when Internet Explorer is used, allow remote attackers to inject arbitrary web script or HTML via a crafted (1) background-image, (2) background, or (3) font-family Cascading Style Sheets (CSS) property, a different vulnerability than CVE-2010-2479.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2010-11-05T16:28:00.000Z