rainbutterfly/cve_corpus huggingface dataset:
CVE-2014-2058 
BuildTrigger in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to bypass access restrictions and execute arbitrary jobs by configuring a job to trigger another job. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-7330.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2059 
Directory traversal vulnerability in the CLI job creation (hudson/cli/CreateJobCommand.java) in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-28T17:00:00.000Z
CVE-2014-2060 
The Winstone servlet container in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack sessions via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2061 
The input control in PasswordParameterDefinition in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to obtain passwords by reading the HTML source code, related to the default value.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2062 
Jenkins before 1.551 and LTS before 1.532.2 does not invalidate the API token when a user is deleted, which allows remote authenticated users to retain access via the token.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2063 
Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to conduct clickjacking attacks via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2064 
The loadUserByUsername function in hudson/security/HudsonPrivateSecurityRealm.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to determine whether a user exists via vectors related to failed login attempts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2065 
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2066 
Session fixation vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to hijack web sessions via vectors involving the "override" of Jenkins cookies.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2067 
Cross-site scripting (XSS) vulnerability in java/hudson/model/Cause.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to inject arbitrary web script or HTML via a "remote cause note."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-28T17:00:00.000Z
CVE-2014-2068 
The doIndex function in hudson/util/RemotingDiagnostics.java in CloudBees Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users with the ADMINISTER permission to obtain sensitive information via vectors related to heapDump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-17T15:00:00.000Z
CVE-2014-2069 
Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.aspx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-13T21:00:00.000Z
CVE-2014-2071 
Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identities within a tunneled EAP method.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-01-08T19:00:00.000Z
CVE-2014-2072 
Dassault Systemes Catia V5-6R2013: Stack Buffer Overflow due to inadequate boundary checks
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-08T15:42:27.000Z
CVE-2014-2073 
Stack-based buffer overflow in Dassault Systemes CATIA V5-6R2013 allows remote attackers to execute arbitrary code via a crafted packet, related to "CATV5_Backbone_Bus."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T15:00:00.000Z
CVE-2014-2075 
TIBCO Enterprise Administrator 1.0.0 and Enterprise Administrator SDK 1.0.0 do not properly enforce administrative authentication requirements, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T11:00:00.000Z
CVE-2014-2077 
Cross-site scripting (XSS) vulnerability in the frontend in Open-Xchange (OX) AppSuite 7.4.1 before 7.4.1-rev10 and 7.4.2 before 7.4.2-rev8 allows remote attackers to inject arbitrary web script or HTML via the subject of an email, involving 'the aria "tags" for screenreaders at the top bar'.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-20T16:00:00.000Z
CVE-2014-2078 
The backend in Open-Xchange (OX) AppSuite 7.4.2 before 7.4.2-rev9 allows remote attackers to obtain sensitive information about user email addresses in opportunistic circumstances by leveraging a failure in e-mail auto configuration for external accounts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-04-10T15:00:00.000Z
CVE-2014-2079 
X File Explorer (aka xfe) might allow local users to bypass intended access restrictions and gain access to arbitrary files by leveraging failure to use directory masks when creating files on Samba and NFS shares.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-07-16T14:00:00.000Z
CVE-2014-2080 
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-28T17:00:00.000Z
CVE-2014-2081 
Multiple SQL injection vulnerabilities in the login in web_reports/cgi-bin/InfoStation.cgi in Innovative vtls-Virtua before 2013.2.4 and 2014.x before 2014.1.1 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-10-20T15:00:00.000Z
CVE-2014-2084 
Skybox View Appliances with ISO 6.3.33-2.14, 6.3.31-2.14, 6.4.42-2.54, 6.4.45-2.56, and 6.4.46-2.57 does not properly restrict access to the Admin interface, which allows remote attackers to obtain sensitive information via a request to (1) scripts/commands/getSystemInformation or (2) scripts/commands/getNetworkConfigurationInfo, cause a denial of service (reboot) via a request to scripts/commands/reboot, or cause a denial of service (shutdown) via a request to scripts/commands/shutdown.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-17T19:00:00.000Z
CVE-2014-2087 
Stack-based buffer overflow in the CDownloads_Deleted::UpdateDownload function in Downloads_Deleted.cpp in Free Download Manager 3.9.3 build 1360, 3.8 build 1173, 3.0 build 852, and earlier allows user-assisted remote attackers to execute arbitrary code via a long file name, which is then deleted from the download queue by the user.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-18T14:00:00.000Z
CVE-2014-2088 
Unrestricted file upload vulnerability in ilias.php in ILIAS 4.4.1 allows remote authenticated users to execute arbitrary PHP code by using a .php filename in an upload_files action to the uploadFiles command, and then accessing the .php file via a direct request to a certain client_id pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T17:00:00.000Z
CVE-2014-2089 
ILIAS 4.4.1 allows remote attackers to execute arbitrary PHP code via an e-mail attachment that leads to creation of a .php file with a certain client_id pathname.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T17:00:00.000Z
CVE-2014-2090 
Multiple cross-site scripting (XSS) vulnerabilities in ilias.php in ILIAS 4.4.1 allow remote authenticated users to inject arbitrary web script or HTML via the (1) tar, (2) tar_val, or (3) title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T17:00:00.000Z
CVE-2014-2091 
Cross-site scripting (XSS) vulnerability in mods/_standard/forums/admin/forum_add.php in ATutor 2.1.1 allows remote authenticated administrators to inject arbitrary web script or HTML via the title parameter in an add_forum action.  NOTE: the original disclosure also reported issues that may not cross privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T17:00:00.000Z
CVE-2014-2092 
Cross-site scripting (XSS) vulnerability in lib/filemanager/ImageManager/editorFrame.php in CMS Made Simple 1.11.10 allows remote attackers to inject arbitrary web script or HTML via the action parameter, a different issue than CVE-2014-0334.  NOTE: the original disclosure also reported issues that may not cross privilege boundaries.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T17:00:00.000Z
CVE-2014-2093 
Untrusted search path vulnerability in Catfish through 0.4.0.3 allows local users to gain privileges via a Trojan horse catfish.py in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2014-2094 
Untrusted search path vulnerability in Catfish through 0.4.0.3, when a Fedora package such as 0.4.0.2-2 is not used, allows local users to gain privileges via a Trojan horse catfish.pyc in the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2014-2095 
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0, when a Fedora package such as 0.8.2-1 is not used, allows local users to gain privileges via a Trojan horse bin/catfish.pyc under the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2014-2096 
Untrusted search path vulnerability in Catfish 0.6.0 through 1.0.0 allows local users to gain privileges via a Trojan horse bin/catfish.py under the current working directory.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-26T11:00:00.000Z
CVE-2014-2097 
The tak_decode_frame function in libavcodec/takdec.c in FFmpeg before 2.1.4 does not properly validate a certain bits-per-sample value, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted TAK (aka Tom's lossless Audio Kompressor) data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T02:00:00.000Z
CVE-2014-2098 
libavcodec/wmalosslessdec.c in FFmpeg before 2.1.4 uses an incorrect data-structure size for certain coefficients, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted WMA data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T02:00:00.000Z
CVE-2014-2099 
The msrle_decode_frame function in libavcodec/msrle.c in FFmpeg before 2.1.4 does not properly calculate line sizes, which allows remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted Microsoft RLE video data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T02:00:00.000Z
CVE-2014-2102 
Cisco Unified Contact Center Express (Unified CCX) does not properly restrict the content of the CCMConfig page, which allows remote authenticated users to obtain sensitive information by examining this content, aka Bug ID CSCum95575.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T01:00:00.000Z
CVE-2014-2103 
Cisco Intrusion Prevention System (IPS) Software allows remote attackers to cause a denial of service (MainApp process outage) via malformed SNMP packets, aka Bug IDs CSCum52355 and CSCul49309.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-02-27T20:00:00.000Z
CVE-2014-2104 
Multiple cross-site scripting (XSS) vulnerabilities in the Business Voice Services Manager (BVSM) page in Cisco Unified Communications Domain Manager 9.0(.1) allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug IDs CSCum78536, CSCum78526, CSCum69809, and CSCum63113.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-02T02:00:00.000Z
CVE-2014-2106 
Cisco IOS 15.3M before 15.3(3)M2 and IOS XE 3.10.xS before 3.10.2S allow remote attackers to cause a denial of service (device reload) via crafted SIP messages, aka Bug ID CSCug45898.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2107 
Cisco IOS 12.2 and 15.0 through 15.3, when used with the Kailash FPGA before 2.6 on RSP720-3C-10GE and RSP720-3CXL-10GE devices, allows remote attackers to cause a denial of service (route switch processor outage) via crafted IP packets, aka Bug ID CSCug84789.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2108 
Cisco IOS 12.2 and 15.0 through 15.3 and IOS XE 3.2 through 3.7 before 3.7.5S and 3.8 through 3.10 before 3.10.1S allow remote attackers to cause a denial of service (device reload) via a malformed IKEv2 packet, aka Bug ID CSCui88426.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2109 
The TCP Input module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted TCP packets, aka Bug IDs CSCuh33843 and CSCuj41494.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2111 
The Application Layer Gateway (ALG) module in Cisco IOS 12.2 through 12.4 and 15.0 through 15.4, when NAT is used, allows remote attackers to cause a denial of service (device reload) via crafted DNS packets, aka Bug ID CSCue00996.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2112 
The SSL VPN (aka WebVPN) feature in Cisco IOS 15.1 through 15.4 allows remote attackers to cause a denial of service (memory consumption) via crafted HTTP requests, aka Bug ID CSCuf51357.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2113 
Cisco IOS 15.1 through 15.3 and IOS XE 3.3 and 3.5 before 3.5.2E; 3.7 before 3.7.5S; and 3.8, 3.9, and 3.10 before 3.10.2S allow remote attackers to cause a denial of service (I/O memory consumption and device reload) via a malformed IPv6 packet, aka Bug ID CSCui59540.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2114 
Cross-site scripting (XSS) vulnerability in UserServlet in Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun24384.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-2115 
Multiple cross-site request forgery (CSRF) vulnerabilities in CERUserServlet pages in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to hijack the authentication of arbitrary users, aka Bug ID CSCun24250.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-2116 
Cisco Emergency Responder (ER) 8.6 and earlier allows remote attackers to inject web pages and modify dynamic content via unspecified parameters, aka Bug ID CSCun37882.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-2117 
Multiple open redirect vulnerabilities in Cisco Emergency Responder (ER) 8.6 and earlier allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified parameters, aka Bug ID CSCun37909.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-04T15:00:00.000Z
CVE-2014-2118 
Multiple cross-site scripting (XSS) vulnerabilities in dashboard-related HTML documents in Cisco Prime Security Manager (aka PRSM) 9.2(.1-2) and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified parameters, aka Bug ID CSCun50687.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-27T21:00:00.000Z
CVE-2014-2119 
The End User Safelist/Blocklist (aka SLBL) service in Cisco AsyncOS Software for Email Security Appliance (ESA) before 7.6.3-023 and 8.x before 8.0.1-023 and Cisco Content Security Management Appliance (SMA) before 7.9.1-110 and 8.x before 8.1.1-013 allows remote authenticated users to execute arbitrary code with root privileges via an FTP session that uploads a modified SLBL database file, aka Bug IDs CSCug79377 and CSCug80118.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-20T20:00:00.000Z
CVE-2014-2120 
Cross-site scripting (XSS) vulnerability in the WebVPN login page in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCun19025.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-19T01:00:00.000Z
CVE-2014-2121 
The Java-based software in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (closing of TCP ports) via unspecified vectors, aka Bug IDs CSCug77633, CSCug77667, CSCug78266, CSCug82795, and CSCuh58643.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-19T01:00:00.000Z
CVE-2014-2122 
Memory leak in the GUI in the Impact server in Cisco Hosted Collaboration Solution (HCS) allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors, aka Bug ID CSCub58999.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-19T01:00:00.000Z
CVE-2014-2124 
Cisco IOS 15.1(2)SY3 and earlier, when used with Supervisor Engine 2T (aka Sup2T) on Catalyst 6500 devices, allows remote attackers to cause a denial of service (device crash) via crafted multicast packets, aka Bug ID CSCuf60783.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-20T20:00:00.000Z
CVE-2014-2125 
Cross-site scripting (XSS) vulnerability in the Web Inbox in Cisco Unity Connection 8.6(2a)SU3 and earlier allows remote attackers to inject arbitrary web script or HTML via an unspecified parameter, aka Bug ID CSCui33028.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-02T01:00:00.000Z
CVE-2014-2126 
Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47), 8.4 before 8.4(7.5), 8.7 before 8.7(1.11), 9.0 before 9.0(3.10), and 9.1 before 9.1(3.4) allows remote authenticated users to gain privileges by leveraging level-0 ASDM access, aka Bug ID CSCuj33496.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-10T01:00:00.000Z
CVE-2014-2127 
Cisco Adaptive Security Appliance (ASA) Software 8.x before 8.2(5.48), 8.3 before 8.3(2.40), 8.4 before 8.4(7.9), 8.6 before 8.6(1.13), 9.0 before 9.0(4.1), and 9.1 before 9.1(4.3) does not properly process management-session information during privilege validation for SSL VPN portal connections, which allows remote authenticated users to gain privileges by establishing a Clientless SSL VPN session and entering crafted URLs, aka Bug ID CSCul70099.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-10T01:00:00.000Z
CVE-2014-2128 
The SSL VPN implementation in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.47, 8.3 before 8.3(2.40), 8.4 before 8.4(7.3), 8.6 before 8.6(1.13), 9.0 before 9.0(3.8), and 9.1 before 9.1(3.2) allows remote attackers to bypass authentication via (1) a crafted cookie value within modified HTTP POST data or (2) a crafted URL, aka Bug ID CSCua85555.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-10T01:00:00.000Z
CVE-2014-2129 
The SIP inspection engine in Cisco Adaptive Security Appliance (ASA) Software 8.2 before 8.2(5.48), 8.4 before 8.4(6.5), 9.0 before 9.0(3.1), and 9.1 before 9.1(2.5) allows remote attackers to cause a denial of service (memory consumption or device reload) via crafted SIP packets, aka Bug ID CSCuh44052.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-04-10T01:00:00.000Z
CVE-2014-2130 
Cisco Secure Access Control Server (ACS) provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka Bug ID CSCuj83189.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-03-06T02:00:00.000Z
CVE-2014-2131 
The packet driver in Cisco IOS allows remote attackers to cause a denial of service (device reload) via a series of (1) Virtual Switching Systems (VSS) or (2) Bidirectional Forwarding Detection (BFD) packets, aka Bug IDs CSCug41049 and CSCue61890.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-03-29T01:00:00.000Z
CVE-2014-2132 
Cisco WebEx Recording Format (WRF) player and Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allow remote attackers to cause a denial of service (application crash) via a crafted (1) .wrf or (2) .arf file that triggers a buffer over-read, aka Bug ID CSCuh52768.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z
CVE-2014-2133 
Buffer overflow in Cisco Advanced Recording Format (ARF) player T27 LD before SP32 EP16, T28 before T28.12, and T29 before T29.2 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted .arf file that triggers improper LZW decompression, aka Bug ID CSCuj87565.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2014-05-08T10:00:00.000Z