{ "CVE_data_type" : "CVE", "CVE_data_format" : "MITRE", "CVE_data_version" : "4.0", "CVE_data_numberOfCVEs" : "5168", "CVE_data_timestamp" : "2020-08-29T08:53Z", "CVE_Items" : [ { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0001", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "gzip", "version" : { "version_data" : [ { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.4a", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f", "name" : "http://git.savannah.gnu.org/cgit/gzip.git/commit/?id=a3db5806d012082b9e25cc36d09f19cd736a468f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02286083", "name" : "SSRT100018", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://ncompress.sourceforge.net/#status", "name" : "http://ncompress.sourceforge.net/#status", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://savannah.gnu.org/forum/forum.php?forum_id=6153", "name" : "http://savannah.gnu.org/forum/forum.php?forum_id=6153", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38220", "name" : "38220", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38223", "name" : "38223", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38225", "name" : "38225", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38232", "name" : "38232", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40551", "name" : "40551", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40655", "name" : "40655", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40689", "name" : "40689", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023490", "name" : "1023490", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1974", "name" : "DSA-1974", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2074", "name" : "DSA-2074", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:019", "name" : "MDVSA-2010:019", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:020", "name" : "MDVSA-2010:020", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:152", "name" : "MDVSA-2011:152", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.osvdb.org/61869", "name" : "61869", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0061.html", "name" : "RHSA-2010:0061", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-889-1", "name" : "USN-889-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0185", "name" : "ADV-2010-0185", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1796", "name" : "ADV-2010-1796", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1872", "name" : "ADV-2010-1872", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=554418", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=554418", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10546", "name" : "oval:org.mitre.oval:def:10546", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7511", "name" : "oval:org.mitre.oval:def:7511", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html", "name" : "RHSA-2010:0095", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer underflow in the unlzw function in unlzw.c in gzip before 1.4 on 64-bit platforms, as used in ncompress and probably others, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted archive that uses LZW compression, leading to an array index error." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.2.4a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:gzip:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.13" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-29T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0002", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "bash", "version" : { "version_data" : [ { "version_value" : "2.05", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.48", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:004", "name" : "MDVSA-2010:004", "refsource" : "MANDRIVA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://qa.mandriva.com/show_bug.cgi?id=56882", "name" : "https://qa.mandriva.com/show_bug.cgi?id=56882", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The /etc/profile.d/60alias.sh script in the Mandriva bash package for Bash 2.05b, 3.0, 3.2, 3.2.48, and 4.0 enables the --show-control-chars option in LS_OPTIONS, which allows local users to send escape sequences to terminal emulators, or hide the existence of a file, via a crafted filename." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:bash:2.05:b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:bash:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:bash:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:bash:3.2.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:bash:4.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T18:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0003", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.4.37.6", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=b45c6e76bc2c72f6426c14bed64fdcbc9bf37cb0", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html", "name" : "FEDORA-2010-0919", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html", "name" : "SUSE-SA:2010:010", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html", "name" : "SUSE-SA:2010:012", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html", "name" : "SUSE-SA:2010:014", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://patchwork.kernel.org/patch/69752/", "name" : "http://patchwork.kernel.org/patch/69752/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38333", "name" : "38333", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38779", "name" : "38779", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2005", "name" : "DSA-2005", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/12/1", "name" : "[oss-security] 20100112 CVE request - kernel: infoleak if print-fatal-signals=1", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/13/4", "name" : "[oss-security] 20100113 Re: CVE request - kernel: infoleak if print-fatal-signals=1", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0147.html", "name" : "RHSA-2010:0147", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/37724", "name" : "37724", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=554578", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=554578", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10550", "name" : "oval:org.mitre.oval:def:10550", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0146.html", "name" : "RHSA-2010:0146", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The print_fatal_signal function in kernel/signal.c in the Linux kernel before 2.6.32.4 on the i386 platform, when print-fatal-signals is enabled, allows local users to discover the contents of arbitrary memory locations by jumping to an address and then reading a log file, and might allow local users to cause a denial of service (system slowdown or crash) by jumping to an address." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.32.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 5.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 7.8, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-26T18:30Z", "lastModifiedDate" : "2018-11-16T15:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0004", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "viewvc", "product" : { "product_data" : [ { "product_name" : "viewvc", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://viewvc.tigris.org/source/browse/*checkout*/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222", "name" : "http://viewvc.tigris.org/source/browse/*checkout*/viewvc/trunk/docs/release-notes/1.1.0.html?revision=2222", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD", "name" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300", "name" : "http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/11/2", "name" : "[oss-security] 20100111 CVE Request: viewvc", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/13/5", "name" : "[oss-security] 20100113 Re: CVE Request: viewvc", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/14/4", "name" : "[oss-security] 20100114 Re: CVE Request: viewvc", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html", "name" : "FEDORA-2009-13610", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html", "name" : "FEDORA-2009-13634", "refsource" : "FEDORA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ViewVC before 1.1.3 composes the root listing view without using the authorizer for each root, which might allow remote attackers to discover private root names by reading this view." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-29T18:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0005", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "viewvc", "product" : { "product_data" : [ { "product_name" : "viewvc", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD", "name" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2242&r2=2313&pathrev=HEAD", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300", "name" : "http://viewvc.tigris.org/source/browse/viewvc?view=rev&revision=2300", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/11/2", "name" : "[oss-security] 20100111 CVE Request: viewvc", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/13/5", "name" : "[oss-security] 20100113 Re: CVE Request: viewvc", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01421.html", "name" : "FEDORA-2009-13610", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg01464.html", "name" : "FEDORA-2009-13634", "refsource" : "FEDORA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "query.py in the query interface in ViewVC before 1.1.3 does not reject configurations that specify an unsupported authorizer for a root, which might allow remote attackers to bypass intended access restrictions via a query." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-29T18:30Z", "lastModifiedDate" : "2010-02-02T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0006", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.4.37.6", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-476" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.gentoo.org/show_bug.cgi?id=300951", "name" : "http://bugs.gentoo.org/show_bug.cgi?id=300951", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://cert.fi/en/reports/2010/vulnerability341748.html", "name" : "http://cert.fi/en/reports/2010/vulnerability341748.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2570a4f5428bcdb1077622342181755741e7fa60", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2570a4f5428bcdb1077622342181755741e7fa60", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html", "name" : "FEDORA-2010-0919", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html", "name" : "SUSE-SA:2010:010", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=linux-netdev&m=126343325807340&w=2", "name" : "[linux-netdev] 20100114 [PATCH]: ipv6: skb_dst() can be NULL in ipv6_hop_jumbo().", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38168", "name" : "38168", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38333", "name" : "38333", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://security-tracker.debian.org/tracker/CVE-2010-0006", "name" : "http://security-tracker.debian.org/tracker/CVE-2010-0006", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/14/2", "name" : "[oss-security] 20100114 CVE-2010-0006 - kernel: ipv6: skb_dst() can be NULL in ipv6_hop_jumbo()", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.osvdb.org/61876", "name" : "61876", "refsource" : "OSVDB", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37810", "name" : "37810", "refsource" : "BID", "tags" : [ "Mailing List", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555217", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555217", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ipv6_hop_jumbo function in net/ipv6/exthdrs.c in the Linux kernel before 2.6.32.4, when network namespaces are enabled, allows remote attackers to cause a denial of service (NULL pointer dereference) via an invalid IPv6 jumbogram, a related issue to CVE-2007-4567." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.32.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.1 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-26T18:30Z", "lastModifiedDate" : "2018-11-13T16:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0007", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" }, { "version_value" : "2.6.32.4", "version_affected" : "=" }, { "version_value" : "2.6.33", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=dce766af541f6605fa9889892c0280bab31c66ab", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=dce766af541f6605fa9889892c0280bab31c66ab", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034250.html", "name" : "FEDORA-2010-0919", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00008.html", "name" : "SUSE-SA:2010:007", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html", "name" : "SUSE-SA:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00005.html", "name" : "SUSE-SA:2010:012", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00007.html", "name" : "SUSE-SA:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html", "name" : "SUSE-SA:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38133", "name" : "38133", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38296", "name" : "38296", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38333", "name" : "38333", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38779", "name" : "38779", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2005", "name" : "DSA-2005", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc4", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc4", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:051", "name" : "MDVSA-2011:051", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/14/1", "name" : "[oss-security] 20100113 CVE Request: kernel ebtables perm check", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/14/3", "name" : "[oss-security] 20100114 Re: CVE Request: kernel ebtables perm check", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0147.html", "name" : "RHSA-2010:0147", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37762", "name" : "37762", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0109", "name" : "ADV-2010-0109", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555238", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555238", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55602", "name" : "kernel-ebtables-security-bypass(55602)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9630", "name" : "oval:org.mitre.oval:def:9630", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0146.html", "name" : "RHSA-2010:0146", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "net/bridge/netfilter/ebtables.c in the ebtables module in the netfilter framework in the Linux kernel before 2.6.33-rc4 does not require the CAP_NET_ADMIN capability for setting or modifying rules, which allows local users to bypass intended access restrictions and configure arbitrary network-traffic filtering via a modified ebtables application." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:rc3:*:*:*:*:*:*", "versionEndIncluding" : "2.6.33" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-19T16:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0008", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ece25dfa0991f65c4e1d26beb1c3c45bda4239b8", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/39295", "name" : "39295", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.23", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/03/17/2", "name" : "[oss-security] 20100317 CVE-2010-0008 kernel: sctp remote denial of service", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0147.html", "name" : "RHSA-2010:0147", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0342.html", "name" : "RHSA-2010:0342", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555658", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555658", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11160", "name" : "oval:org.mitre.oval:def:11160", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0146.html", "name" : "RHSA-2010:0146", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The sctp_rcv_ootb function in the SCTP implementation in the Linux kernel before 2.6.23 allows remote attackers to cause a denial of service (infinite loop) via (1) an Out Of The Blue (OOTB) chunk or (2) a chunk of zero length." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.22.19" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-19T19:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0009", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "couchdb", "version" : { "version_data" : [ { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-03/0267.html", "name" : "20100331 [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://couchdb.apache.org/security.html", "name" : "http://couchdb.apache.org/security.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39146", "name" : "39146", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/63350", "name" : "63350", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510427/100/0/threaded", "name" : "20100331 [SECURITY] CVE-2008-2370: Apache CouchDB Timing Attack Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39116", "name" : "39116", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=578572", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=578572", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apache CouchDB 0.8.0 through 0.10.1 allows remote attackers to obtain sensitive information by measuring the completion time of operations that verify (1) hashes or (2) passwords." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:couchdb:0.10.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-05T16:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0010", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "http_server", "version" : { "version_data" : [ { "version_value" : "0.8.11", "version_affected" : "=" }, { "version_value" : "0.8.14", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.17", "version_affected" : "=" }, { "version_value" : "1.3.18", "version_affected" : "=" }, { "version_value" : "1.3.19", "version_affected" : "=" }, { "version_value" : "1.3.20", "version_affected" : "=" }, { "version_value" : "1.3.22", "version_affected" : "=" }, { "version_value" : "1.3.23", "version_affected" : "=" }, { "version_value" : "1.3.24", "version_affected" : "=" }, { "version_value" : "1.3.25", "version_affected" : "=" }, { "version_value" : "1.3.26", "version_affected" : "=" }, { "version_value" : "1.3.27", "version_affected" : "=" }, { "version_value" : "1.3.28", "version_affected" : "=" }, { "version_value" : "1.3.29", "version_affected" : "=" }, { "version_value" : "1.3.30", "version_affected" : "=" }, { "version_value" : "1.3.31", "version_affected" : "=" }, { "version_value" : "1.3.32", "version_affected" : "=" }, { "version_value" : "1.3.33", "version_affected" : "=" }, { "version_value" : "1.3.34", "version_affected" : "=" }, { "version_value" : "1.3.35", "version_affected" : "=" }, { "version_value" : "1.3.36", "version_affected" : "=" }, { "version_value" : "1.3.37", "version_affected" : "=" }, { "version_value" : "1.3.38", "version_affected" : "=" }, { "version_value" : "1.3.39", "version_affected" : "=" }, { "version_value" : "1.3.40", "version_affected" : "=" }, { "version_value" : "1.3.41", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0589.html", "name" : "20100127 Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://blog.pi3.com.pl/?p=69", "name" : "http://blog.pi3.com.pl/?p=69", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://httpd.apache.org/dev/dist/CHANGES_1.3.42", "name" : "http://httpd.apache.org/dev/dist/CHANGES_1.3.42", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html", "name" : "SUSE-SR:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=130497311408250&w=2", "name" : "SSRT090208", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txt", "name" : "http://packetstormsecurity.org/1001-exploits/modproxy-overflow.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38319", "name" : "38319", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39656", "name" : "39656", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://site.pi3.com.pl/adv/mod_proxy.txt", "name" : "http://site.pi3.com.pl/adv/mod_proxy.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509185/100/0/threaded", "name" : "20100127 Mod_proxy from apache 1.3 - Integer overflow which causes heap overflow.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37966", "name" : "37966", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securitytracker.com/id?1023533", "name" : "1023533", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0240", "name" : "ADV-2010-0240", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1001", "name" : "ADV-2010-1001", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55941", "name" : "modproxy-approxysendfb-bo(55941)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7923", "name" : "oval:org.mitre.oval:def:7923", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in the ap_proxy_send_fb function in proxy/proxy_util.c in mod_proxy in the Apache HTTP Server before 1.3.42 on 64-bit platforms allows remote origin servers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a large chunk size that triggers a heap-based buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:0.8.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:0.8.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:1.3.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.41" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T16:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0011", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "uzbl", "product" : { "product_data" : [ { "product_name" : "uzbl", "version" : { "version_data" : [ { "version_value" : "2009.12.22", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047", "name" : "http://github.com/Dieterbe/uzbl/commit/1958b52d41cba96956dc1995660de49525ed1047", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://github.com/Dieterbe/uzbl/downloads", "name" : "http://github.com/Dieterbe/uzbl/downloads", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.uzbl.org/pipermail/uzbl-dev-uzbl.org/2010-January/000586.html", "name" : "[uzbl-dev] 20100102 Fw: Uzbl: security issue", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/06/1", "name" : "[oss-security] 20100106 CVE request - uzbl remote code execution", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/06/3", "name" : "[oss-security] 20100106 Re: CVE request - uzbl remote code execution", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.uzbl.org/news.php?id=22", "name" : "http://www.uzbl.org/news.php?id=22", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56612", "name" : "uzbl-evaljs-command-execution(56612)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The eval_js function in uzbl-core.c in Uzbl before 2010.01.05 exposes the run method of the Uzbl object, which allows remote attackers to execute arbitrary commands via JavaScript code." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:uzbl:uzbl:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2009.12.22" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0012", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "transmissionbt", "product" : { "product_data" : [ { "product_name" : "transmission", "version" : { "version_data" : [ { "version_value" : "1.22", "version_affected" : "=" }, { "version_value" : "1.34", "version_affected" : "=" }, { "version_value" : "1.75", "version_affected" : "=" }, { "version_value" : "1.76", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/37993", "name" : "37993", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38005", "name" : "38005", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz", "name" : "http://security.debian.org/pool/updates/main/t/transmission/transmission_1.22-1+lenny2.diff.gz", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://trac.transmissionbt.com/changeset/9829/", "name" : "http://trac.transmissionbt.com/changeset/9829/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://trac.transmissionbt.com/wiki/Changes#version-1.77", "name" : "http://trac.transmissionbt.com/wiki/Changes#version-1.77", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1967", "name" : "DSA-1967", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/debian-devel-changes@lists.debian.org/msg264483.html", "name" : "[debian-devel-changes] 20100105 Accepted transmission 1.77-1 (source all amd64)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/06/2", "name" : "[oss-security] 20100106 CVE Request: Transmission", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/06/4", "name" : "[oss-security] 20100106 Re: CVE Request: Transmission", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0071", "name" : "ADV-2010-0071", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55454", "name" : "transmission-name-directory-traversal(55454)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://launchpad.net/bugs/500625", "name" : "https://launchpad.net/bugs/500625", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in libtransmission/metainfo.c in Transmission 1.22, 1.34, 1.75, and 1.76 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in a pathname within a .torrent file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:transmissionbt:transmission:1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:transmissionbt:transmission:1.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:transmissionbt:transmission:1.75:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:transmissionbt:transmission:1.76:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-08T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0013", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adium", "product" : { "product_data" : [ { "product_name" : "adium", "version" : { "version_data" : [ { "version_value" : "1.3.8", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467", "name" : "http://d.pidgin.im/viewmtn/revision/info/3d02401cf232459fc80c0837d31e05fae7ae5467", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f", "name" : "http://d.pidgin.im/viewmtn/revision/info/4be2df4f72bd8a55cdae7f2554b73342a497c92f", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810", "name" : "http://d.pidgin.im/viewmtn/revision/info/c64a1adc8bda2b4aeaae1f273541afbc4f71b810", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.c", "name" : "http://developer.pidgin.im/viewmtn/revision/diff/3d02401cf232459fc80c0837d31e05fae7ae5467/with/c64a1adc8bda2b4aeaae1f273541afbc4f71b810/libpurple/protocols/msn/slp.c", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html", "name" : "http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033771.html", "name" : "FEDORA-2010-0368", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/033848.html", "name" : "FEDORA-2010-0429", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/37953", "name" : "37953", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/37954", "name" : "37954", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/37961", "name" : "37961", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-277450-1", "name" : "277450", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1022203.1-1", "name" : "1022203", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085", "name" : "MDVSA-2010:085", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/02/1", "name" : "[oss-security] 20100102 CVE request - pidgin MSN arbitrary file upload", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/07/1", "name" : "[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/07/2", "name" : "[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2009/3662", "name" : "ADV-2009-3662", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2009/3663", "name" : "ADV-2009-3663", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1020", "name" : "ADV-2010-1020", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=552483", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=552483", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10333", "name" : "oval:org.mitre.oval:def:10333", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17620", "name" : "oval:org.mitre.oval:def:17620", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in slp.c in the MSN protocol plugin in libpurple in Pidgin 2.6.4 and Adium 1.3.8 allows remote attackers to read arbitrary files via a .. (dot dot) in an application/x-msnmsgrp2p MSN emoticon (aka custom smiley) request, a related issue to CVE-2004-0122. NOTE: it could be argued that this is resultant from a vulnerability in which an emoticon download request is processed even without a preceding text/x-mms-emoticon message that announced availability of the emoticon." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adium:adium:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-09T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0014", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "sssd", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.99.0", "version_affected" : "=" }, { "version_value" : "0.99.1", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38160", "name" : "38160", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37747", "name" : "37747", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=553233", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=553233", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1", "name" : "https://fedorahosted.org/sssd/wiki/Releases/Notes-1.0.1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:0.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedoraproject:sssd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.7 }, "severity" : "LOW", "exploitabilityScore" : 1.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T18:30Z", "lastModifiedDate" : "2010-01-15T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0015", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.10.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=560333", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126320356003425&w=2", "name" : "[oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126320570505651&w=2", "name" : "[oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://sourceware.org/bugzilla/show_bug.cgi?id=11134", "name" : "http://sourceware.org/bugzilla/show_bug.cgi?id=11134", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup", "name" : "http://svn.debian.org/viewsvn/pkg-glibc/glibc-package/trunk/debian/patches/any/submitted-nis-shadow.diff?revision=4062&view=markup", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:111", "name" : "MDVSA-2010:111", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:112", "name" : "MDVSA-2010:112", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/07/3", "name" : "[oss-security] 20100107 CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/08/1", "name" : "[oss-security] 20100108 Re: CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/08/2", "name" : "[oss-security] 20100109 Re: CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/11/6", "name" : "[oss-security] 20100111 Re: CVE id request: GNU libc: NIS shadow password leakage", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html", "name" : "SUSE-SA:2010:052", "refsource" : "SUSE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "nis/nss_nis/nis-pwd.c in the GNU C Library (aka glibc or libc6) 2.7 and Embedded GLIBC (EGLIBC) 2.10.2 adds information from the passwd.adjunct.byname map to entries in the passwd map, which allows remote attackers to obtain the encrypted passwords of NIS accounts by calling the getpwnam function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.10.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T18:30Z", "lastModifiedDate" : "2016-12-07T02:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0016", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006", "name" : "MS10-006", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8278", "name" : "oval:org.mitre.oval:def:8278", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB client implementation in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate response fields, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted response, aka \"SMB Client Pool Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:home:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:home:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0017", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-006", "name" : "MS10-006", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8298", "name" : "oval:org.mitre.oval:def:8298", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the SMB client implementation in Microsoft Windows Server 2008 R2 and Windows 7 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code, and in the SMB client implementation in Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows local users to gain privileges, via a crafted SMB Negotiate response, aka \"SMB Client Race Condition Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0018", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx", "name" : "http://blogs.technet.com/srd/archive/2010/01/12/ms10-001-font-file-decompression-vulnerability.aspx", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://osvdb.org/61651", "name" : "61651", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/35457", "name" : "35457", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37671", "name" : "37671", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023432", "name" : "1023432", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012B.html", "name" : "TA10-012B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0095", "name" : "ADV-2010-0095", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-001", "name" : "MS10-001", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8324", "name" : "oval:org.mitre.oval:def:8324", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in the Embedded OpenType (EOT) Font Engine (t2embed.dll) in Microsoft Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code via compressed data that represents a crafted EOT font, aka \"Microtype Express Compressed Fonts Integer Flaw in the LZCOMP Decompressor Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-001.mspx\r\n\r\n\r\nThis security update is rated Critical for Microsoft Windows 2000, and is rated Low for Windows XP, Windows Server 2003, Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2. For more information, see the subsection, Affected and Non-Affected Software, in this section." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-13T19:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0019", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "silverlight", "version" : { "version_data" : [ { "version_value" : "3.0.40624.00", "version_affected" : "=" }, { "version_value" : "3.0.40723.0", "version_affected" : "=" }, { "version_value" : "3.0.40818.0", "version_affected" : "<=" }, { "version_value" : "3.0.50106.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-222A.html", "name" : "TA10-222A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-060", "name" : "MS10-060", "refsource" : "MS", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Silverlight 3 before 3.0.50611.0 on Windows, and before 3.0.41130.0 on Mac OS X, does not properly handle pointers, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and framework outage) via a crafted web site, aka \"Microsoft Silverlight Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:3.0.40624.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:3.0.40723.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.40818.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:3.0.40624.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:3.0.40723.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:3.0.40818.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:silverlight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.50106.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-11T18:47Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0020", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" }, { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012", "name" : "MS10-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8438", "name" : "oval:org.mitre.oval:def:8438", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate request fields, which allows remote authenticated users to execute arbitrary code via a malformed request, aka \"SMB Pathname Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0021", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012", "name" : "MS10-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8524", "name" : "oval:org.mitre.oval:def:8524", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple race conditions in the SMB implementation in the Server service in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allow remote attackers to cause a denial of service (system hang) via a crafted (1) SMBv1 or (2) SMBv2 Negotiate packet, aka \"SMB Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.1 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0022", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012", "name" : "MS10-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8314", "name" : "oval:org.mitre.oval:def:8314", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly validate the share and servername fields in SMB packets, which allows remote attackers to cause a denial of service (system hang) via a crafted packet, aka \"SMB Null Pointer Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0023", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38509", "name" : "38509", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-011", "name" : "MS10-011", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8304", "name" : "oval:org.mitre.oval:def:8304", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Client/Server Run-time Subsystem (CSRSS) in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly kill processes after a logout, which allows local users to obtain sensitive information or gain privileges via a crafted application that continues to execute throughout the logout of one user and the login session of the next user, aka \"CSRSS Local Privilege Elevation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0024", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024", "name" : "MS10-024", "refsource" : "MS", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067", "name" : "oval:org.mitre.oval:def:7067", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka \"SMTP Server MX Record Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2007:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2010:-:*:*:*:*:x64:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2020-04-09T13:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0025", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "exchange_server", "version" : { "version_data" : [ { "version_value" : "2000", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2010", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39253", "name" : "39253", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024", "name" : "MS10-024", "refsource" : "MS", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12175", "name" : "oval:org.mitre.oval:def:12175", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka \"SMTP Memory Allocation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2007:sp2:*:*:*:*:x64:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:exchange_server:2010:-:*:*:*:*:x64:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2020-04-09T13:24Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0026", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-010", "name" : "MS10-010", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8006", "name" : "oval:org.mitre.oval:def:8006", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service (host OS hang) via a crafted application that executes a malformed series of machine instructions, aka \"Hyper-V Instruction Set Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0027", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.5730", "version_affected" : "=" }, { "version_value" : "7.0.5730.11", "version_affected" : "=" }, { "version_value" : "7.00.5730.1100", "version_affected" : "=" }, { "version_value" : "7.00.6000.16386", "version_affected" : "=" }, { "version_value" : "7.00.6000.16441", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/509470/100/0/threaded", "name" : "20100209 ZDI-10-016: Microsoft Windows ShellExecute Improper Sanitization Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-016/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-016/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-007", "name" : "MS10-007", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55773", "name" : "ie-url-code-execution(55773)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8464", "name" : "oval:org.mitre.oval:def:8464", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The URL validation functionality in Microsoft Internet Explorer 5.01, 6, 6 SP1, 7 and 8, and the ShellExecute API function in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, does not properly process input parameters, which allows remote attackers to execute arbitrary local programs via a crafted URL, aka \"URL Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730:unknown:gold:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.5730.1100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16386:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16441:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0028", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/36634", "name" : "36634", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-005", "name" : "MS10-005", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8429", "name" : "oval:org.mitre.oval:def:8429", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Microsoft Paint in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 allows remote attackers to execute arbitrary code via a crafted JPEG (.JPG) file, aka \"MS Paint Integer Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0029", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8410", "name" : "oval:org.mitre.oval:def:8410", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft Office PowerPoint 2002 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"PowerPoint File Path Handling Buffer Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0030", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8050", "name" : "oval:org.mitre.oval:def:8050", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"PowerPoint LinkedSlideAtom Heap Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0031", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" } ] } }, { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8081", "name" : "oval:org.mitre.oval:def:8081", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Array index error in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3, and PowerPoint in Office 2004 for Mac, allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"PowerPoint OEPlaceholderAtom 'placementId' Invalid Array Indexing Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0032", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8303", "name" : "oval:org.mitre.oval:def:8303", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Office PowerPoint 2002 SP3 and 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"OEPlaceholderAtom Use After Free Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0033", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7711", "name" : "oval:org.mitre.oval:def:7711", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"PowerPoint Viewer TextBytesAtom Record Stack Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0034", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "powerpoint", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023563", "name" : "1023563", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-004", "name" : "MS10-004", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8268", "name" : "oval:org.mitre.oval:def:8268", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in Microsoft Office PowerPoint 2003 SP3 allows remote attackers to execute arbitrary code via a crafted PowerPoint document, aka \"Office PowerPoint Viewer TextCharsAtom Record Stack Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:powerpoint:2003:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0035", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-014", "name" : "MS10-014", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8428", "name" : "oval:org.mitre.oval:def:8428", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Key Distribution Center (KDC) in Kerberos in Microsoft Windows 2000 SP4, Server 2003 SP2, and Server 2008 Gold and SP2, when a trust relationship with a non-Windows Kerberos realm exists, allows remote authenticated users to cause a denial of service (NULL pointer dereference and domain controller outage) via a crafted Ticket Granting Ticket (TGT) renewal request, aka \"Kerberos Null Pointer Dereference Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-014.mspx\r\n\r\n\r\n\"This vulnerability only affects domain controllers. Servers that do not perform the role of domain controllers are not affected.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0036", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html", "name" : "APPLE-SA-2010-02-02-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html", "name" : "APPLE-SA-2010-01-19-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38241", "name" : "38241", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4004", "name" : "http://support.apple.com/kb/HT4004", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4013", "name" : "http://support.apple.com/kb/HT4013", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37868", "name" : "37868", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023472", "name" : "1023472", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0173", "name" : "ADV-2010-0173", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55746", "name" : "macos-coreaudio-mp4-bo(55746)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in CoreAudio in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted MP4 audio file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0037", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jan/msg00000.html", "name" : "APPLE-SA-2010-01-19-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38241", "name" : "38241", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4004", "name" : "http://support.apple.com/kb/HT4004", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37869", "name" : "37869", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023473", "name" : "1023473", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0173", "name" : "ADV-2010-0173", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55747", "name" : "macos-imageraw-dng-bo(55747)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0038", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "iphone_os", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Feb/msg00000.html", "name" : "APPLE-SA-2010-02-02-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/62128", "name" : "62128", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4013", "name" : "http://support.apple.com/kb/HT4013", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38040", "name" : "38040", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Recovery Mode in Apple iPhone OS 1.0 through 3.1.2, and iPhone OS for iPod touch 1.1 through 3.1.2, allows physically proximate attackers to bypass device locking, and read or modify arbitrary data, via a USB control message that triggers memory corruption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.0:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.0.2:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.0:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.2:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.3:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.4:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:1.1.5:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.0:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.1:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.0.2:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.1:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:2.2.1:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.0:-:ipodtouch:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.0.1:-:iphone:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T19:30Z", "lastModifiedDate" : "2019-09-26T17:05Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0039", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "airport_express", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "airport_express_base_station_firmware", "version" : { "version_data" : [ { "version_value" : "3.84", "version_affected" : "=" }, { "version_value" : "4.0.9", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.3", "version_affected" : "=" }, { "version_value" : "7.3.2", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.2", "version_affected" : "<=" } ] } }, { "product_name" : "airport_extreme", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "airport_extreme_base_station_firmware", "version" : { "version_data" : [ { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.7", "version_affected" : "=" } ] } }, { "product_name" : "time_capsule", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Dec/msg00001.html", "name" : "APPLE-SA-2010-12-16-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4298", "name" : "http://support.apple.com/kb/HT4298", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024907", "name" : "1024907", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Application-Level Gateway (ALG) on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 modifies PORT commands in incoming FTP traffic, which allows remote attackers to use the device's IP address for arbitrary intranet TCP traffic by leveraging write access to an intranet FTP server." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:3.84:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:4.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:7.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express_base_station_firmware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "7.4.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_extreme_base_station_firmware:5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_express:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:airport_extreme:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:apple:time_capsule:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-12-22T03:00Z", "lastModifiedDate" : "2011-01-19T06:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0040", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38674", "name" : "38674", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023706", "name" : "1023706", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56826", "name" : "safari-colorsync-bo(56826)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6741", "name" : "oval:org.mitre.oval:def:6741", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image with a crafted color profile that triggers a heap-based buffer overflow." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\n\r\nColorSync\r\nCVE-ID: CVE-2010-0040\r\nAvailable for: Windows 7, Vista, XP\r\nImpact: Viewing a maliciously crafted image with an embedded color\r\nprofile may lead to an unexpected application termination or\r\narbitrary code execution\r\nDescription: An integer overflow, that could result in a heap buffer\r\noverflow, exists in the handling of images with an embedded color\r\nprofile. Opening a maliciously crafted image with an embedded color\r\nprofile may lead to an unexpected application termination or\r\narbitrary code execution. The issue is addressed by performing\r\nadditional validation of color profiles. This issue does not affect\r\nMac OS X systems. Credit to Sebastien Renaud of VUPEN Vulnerability\r\nResearch Team for reporting this issue.\r\n" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0041", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38676", "name" : "38676", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023706", "name" : "1023706", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6885", "name" : "oval:org.mitre.oval:def:6885", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\nImageIO\r\nCVE-ID: CVE-2010-0041\r\nAvailable for: Windows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may result in sending\r\ndata from Safari's memory to the website\r\nDescription: An uninitialized memory access issue exists in\r\nImageIO's handling of BMP images. Visiting a maliciously crafted\r\nwebsite may result in sending data from Safari's memory to the\r\nwebsite. This issue is addressed through improved memory handling and\r\nadditional validation of BMP images. Credit to Matthew 'j00ru'\r\nJurczyk of Hispasec for reporting this issue.\r\n\r\n" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0042", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html", "name" : "APPLE-SA-2010-11-22-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42314", "name" : "42314", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4456", "name" : "http://support.apple.com/kb/HT4456", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38677", "name" : "38677", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023706", "name" : "1023706", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7561", "name" : "oval:org.mitre.oval:def:7561", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\n'ImageIO\r\nCVE-ID: CVE-2010-0042\r\nAvailable for: Windows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may result in sending\r\ndata from Safari's memory to the website\r\nDescription: An uninitialized memory access issue exists in\r\nImageIO's handling of TIFF images. Visiting a maliciously crafted\r\nwebsite may result in sending data from Safari's memory to the\r\nwebsite. This issue is addressed through improved memory handling and\r\nadditional validation of TIFF images. Credit to Matthew 'j00ru'\r\nJurczyk of Hispasec for reporting this issue.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0043", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38673", "name" : "38673", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023706", "name" : "1023706", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6901", "name" : "oval:org.mitre.oval:def:6901", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted TIFF image." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\n'ImageIO\r\nCVE-ID: CVE-2010-0043\r\nAvailable for: Windows 7, Vista, XP\r\nImpact: Processing a maliciously crafted TIFF image may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A memory corruption issue exists in the handling of\r\nTIFF images. Processing a maliciously crafted TIFF image may lead to\r\nan unexpected application termination or arbitrary code execution.\r\nThis issue is addressed through improved memory handling. Credit to\r\nGus Mueller of Flying Meat for reporting this issue.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0044", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/62937", "name" : "62937", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38675", "name" : "38675", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56830", "name" : "safari-pubsub-security-bypass(56830)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7051", "name" : "oval:org.mitre.oval:def:7051", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PubSub in Apple Safari before 4.0.5 does not properly implement use of the Accept Cookies preference to block cookies, which makes it easier for remote web servers to track users by setting a cookie in a (1) RSS or (2) Atom feed." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'PubSub\r\nCVE-ID: CVE-2010-0044\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting or updating a feed may result in a cookie being\r\nset, even if Safari is configured to block cookies\r\nDescription: An implementation issue exists in the handling of\r\ncookies set by RSS and Atom feeds. Visiting or updating a feed may\r\nresult in a cookie being set, even if Safari is configured to block\r\ncookies via the \"Accept Cookies\" preference. This update addresses\r\nthe issue by respecting the preference while updating or viewing\r\nfeeds.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0045", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023706", "name" : "1023706", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6817", "name" : "oval:org.mitre.oval:def:6817", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple Safari before 4.0.5 on Windows does not properly validate external URL schemes, which allows remote attackers to open local files and execute arbitrary code via a crafted HTML document." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\nCVE-ID: CVE-2010-0045\r\nAvailable for: Windows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to arbitrary\r\ncode execution\r\nDescription: An issue in Safari's handling of external URL schemes\r\nmay cause a local file to be opened in response to a URL encountered\r\non a web page. Visiting a maliciously crafted website may lead to\r\narbitrary code execution. This update addresses the issue through\r\nimproved validation of external URLs. This issue does not affect Mac\r\nOS X systems. Credit to Billy Rios and Microsoft Vulnerability\r\nResearch (MSVR) for reporting this issue.\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0046", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7053", "name" : "oval:org.mitre.oval:def:7053", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Cascading Style Sheets (CSS) implementation in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted format arguments." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'WebKit\r\nCVE-ID: CVE-2010-0046\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A memory corruption issue exists in WebKit's handling\r\nof CSS format() arguments. Visiting a maliciously crafted website may\r\nlead to an unexpected application termination or arbitrary code\r\nexecution. This issue is addressed through improved handling of CSS\r\nformat() arguments. Credit to Robert Swiecki of Google Inc. for\r\nreporting this issue.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0047", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6882", "name" : "oval:org.mitre.oval:def:6882", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to \"HTML object element fallback content.\"" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'WebKit\r\nCVE-ID: CVE-2010-0047\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in the handling of HTML\r\nobject element fallback content. Visiting a maliciously crafted\r\nwebsite may lead to an unexpected application termination or\r\narbitrary code execution. This issue is addressed through improved\r\nmemory reference tracking. Credit to wushi of team509, working with\r\nTippingPoint's Zero Day Initiative for reporting this issue.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0048", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7135", "name" : "oval:org.mitre.oval:def:7135", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted XML document." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\nCVE-ID: CVE-2010-0048\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in WebKit's parsing of\r\nXML documents. Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution. This\r\nissue is addressed through improved memory reference tracking.\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0049", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=863", "name" : "20100311 Multiple Vendor WebKit HTML Element Use After Free Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/62942", "name" : "62942", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6810", "name" : "oval:org.mitre.oval:def:6810", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via HTML elements with right-to-left (RTL) text directionality." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.\r\n\r\nCVE-ID: CVE-2010-0049\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in the handling of HTML\r\nelements containing right-to-left displayed text. Visiting a\r\nmaliciously crafted website may lead to an unexpected application\r\ntermination or arbitrary code execution. This issue is addressed\r\nthrough improved memory reference tracking. Credit to wushi&Z of\r\nteam509 for reporting this issue.\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0050", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56836", "name" : "safari-nested-html-code-exec(56836)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7587", "name" : "oval:org.mitre.oval:def:7587", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n\r\n'WebKit\r\nCVE-ID: CVE-2010-0050\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in WebKit's handling of\r\nincorrectly nested HTML tags. Visiting a maliciously crafted website\r\nmay lead to an unexpected application termination or arbitrary code\r\nexecution. This issue is addressed through improved memory reference\r\ntracking. Credit to wushi&Z of team509 working with TippingPoint's\r\nZero Day Initiative for reporting this issue.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0051", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://code.google.com/p/chromium/issues/detail?id=9877", "name" : "http://code.google.com/p/chromium/issues/detail?id=9877", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html", "name" : "APPLE-SA-2010-11-22-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/62944", "name" : "62944", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html", "name" : "http://scarybeastsecurity.blogspot.com/2009/12/generic-cross-browser-cross-domain.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42314", "name" : "42314", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4456", "name" : "http://support.apple.com/kb/HT4456", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://websec.sv.cmu.edu/css/css.pdf", "name" : "http://websec.sv.cmu.edu/css/css.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56837", "name" : "safari-stylesheet-info-disclosure(56837)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7554", "name" : "oval:org.mitre.oval:def:7554", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WebKit in Apple Safari before 4.0.5 does not properly validate the cross-origin loading of stylesheets, which allows remote attackers to obtain sensitive information via a crafted HTML document. NOTE: this might overlap CVE-2010-0651." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'WebKit\r\nCVE-ID: CVE-2010-0051\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to the\r\ndisclosure of sensitive information\r\nDescription: An implementation issue exists in WebKit's handling of\r\ncross-origin stylesheet requests. Visiting a maliciously crafted\r\nwebsite may disclose the content of protected resources on another\r\nwebsite. This update addresses the issue by performing additional\r\nvalidation on stylesheets that are loaded during a cross-origin\r\nrequest.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0052", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7403", "name" : "oval:org.mitre.oval:def:7403", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to \"callbacks for HTML elements.\"" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\nCVE-ID: CVE-2010-0052\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in WebKit's handling of\r\ncallbacks for HTML elements. Visiting a maliciously crafted website\r\nmay lead to an unexpected application termination or arbitrary code\r\nexecution. This issue is addressed through improved memory reference\r\ntracking. Credit: Apple.\r\n\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0053", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/62948", "name" : "62948", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7323", "name" : "oval:org.mitre.oval:def:7323", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the run-in Cascading Style Sheets (CSS) display property." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\nCVE-ID: CVE-2010-0053\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in the rendering of\r\ncontent with a CSS display property set to 'run-in'. Visiting a\r\nmaliciously crafted website may lead to an unexpected application\r\ntermination or arbitrary code execution. This issue is addressed\r\nthrough improved memory reference tracking. Credit to wushi of\r\nteam509, working with TippingPoint's Zero Day Initiative for\r\nreporting this issue." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0054", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html", "name" : "APPLE-SA-2010-03-11-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041383.html", "name" : "FEDORA-2010-8360", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041432.html", "name" : "FEDORA-2010-8379", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041436.html", "name" : "FEDORA-2010-8423", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://osvdb.org/62949", "name" : "62949", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4070", "name" : "http://support.apple.com/kb/HT4070", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38671", "name" : "38671", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1023708", "name" : "1023708", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6915", "name" : "oval:org.mitre.oval:def:6915", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML IMG elements." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'WebKit\r\nCVE-ID: CVE-2010-0054\r\nAvailable for: Mac OS X v10.4.11, Mac OS X Server v10.4.11,\r\nMac OS X v10.5.8, Mac OS X Server v10.5.8,\r\nMac OS X v10.6.1 or later, Mac OS X Server v10.6.1 or later,\r\nWindows 7, Vista, XP\r\nImpact: Visiting a maliciously crafted website may lead to an\r\nunexpected application termination or arbitrary code execution\r\nDescription: A use-after-free issue exists in WebKit's handling of\r\nHTML image elements. Visiting a maliciously crafted website may lead\r\nto an unexpected application termination or arbitrary code execution.\r\nThis issue is addressed through improved memory reference tracking.\r\nCredit: Apple.'" }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010/Mar/msg00000.html\r\n\r\n'Safari 4.0.5 is available via the Apple Software Update application,\r\nor Apple's Safari download site at:\r\nhttp://www.apple.com/safari/download/'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T14:15Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0055", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WXQ3NRRTC4A3F3GW2RQNATJHYDIRSCBS/", "name" : "FEDORA-2020-6490123c7c", "refsource" : "FEDORA", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2020-01-17T07:15Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0056", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Cocoa spell checking in AppKit in Apple Mac OS X 10.5.8 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T17:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0057", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "AFP Server in Apple Mac OS X before 10.6.3 does not prevent guest use of AFP shares when guest access is disabled, which allows remote attackers to bypass intended access restrictions via a mount request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T17:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0058", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "freshclam in ClamAV in Apple Mac OS X 10.5.8 with Security Update 2009-005 has an incorrect launchd.plist ProgramArguments key and consequently does not run, which might allow remote attackers to introduce viruses into the system." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T17:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0059", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510517/100/0/threaded", "name" : "20100402 ZDI-10-041: Apple QuickTime QDM2/QDCA Atom Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-041", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-041", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6922", "name" : "oval:org.mitre.oval:def:6922", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T17:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0060", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7513", "name" : "oval:org.mitre.oval:def:7513", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDMC encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0062", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510510/100/0/threaded", "name" : "20100402 ZDI-10-036: Apple QuickTime H.263 PictureHeader Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-036", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-036", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6626", "name" : "oval:org.mitre.oval:def:6626", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length calculation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:49Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0063", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Incomplete blacklist vulnerability in CoreTypes in Apple Mac OS X before 10.6.3 makes it easier for user-assisted remote attackers to execute arbitrary JavaScript via a web page that offers a download with a Content-Type value that is not on the list of possibly unsafe content types for Safari, as demonstrated by the values for the (1) .ibplugin and (2) .url extensions." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/slices/2000.html\r\n\r\n'Incomplete Blacklist - CWE-184'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0064", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DesktopServices in Apple Mac OS X 10.6 before 10.6.3 preserves file ownership during an authenticated Finder copy, which might allow local users to bypass intended disk-quota restrictions and have unspecified other impact by copying files owned by other users." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0065", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Disk Images in Apple Mac OS X before 10.6.3 allows user-assisted remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted disk image with bzip2 compression." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0066", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "application_server", "version" : { "version_data" : [ { "version_value" : "7.0.4.3", "version_affected" : "=" }, { "version_value" : "10.1.4.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023438", "name" : "1023438", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Access Manager Identity Server component in Oracle Application Server 7.0.4.3 and 10.1.4.2 allows remote attackers to affect integrity via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:7.0.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:10.1.4.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0067", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "application_server", "version" : { "version_data" : [ { "version_value" : "10.1.2.3", "version_affected" : "=" }, { "version_value" : "10.1.3.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023438", "name" : "1023438", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect confidentiality via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0068", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "bea_product_suite", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP2, and 10.0 allows remote attackers to affect confidentiality via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0069", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "bea_product_suite", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "Patch", "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0, SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP1, and 10.3.0 allows remote attackers to affect integrity via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0070", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "application_server", "version" : { "version_data" : [ { "version_value" : "10.1.2.3", "version_affected" : "=" }, { "version_value" : "10.1.3.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023438", "name" : "1023438", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Containers for J2EE component in Oracle Application Server 10.1.2.3 and 10.1.3.4 allows remote attackers to affect integrity via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:10.1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:application_server:10.1.3.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0071", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database_server", "version" : { "version_data" : [ { "version_value" : "9.2.0.8", "version_affected" : "=" }, { "version_value" : "9.2.0.8dv", "version_affected" : "=" }, { "version_value" : "10.1.0.5", "version_affected" : "=" }, { "version_value" : "10.2.0.4", "version_affected" : "=" }, { "version_value" : "11.1.0.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:9.2.0.8dv:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:10.2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database_server:11.1.0.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0072", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "secure_backup", "version" : { "version_data" : [ { "version_value" : "10.2.0.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is a buffer overflow in observiced.exe that allows remote attackers to execute arbitrary code via vectors related to a \"reverse lookup of connections\" to TCP port 10000." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:secure_backup:10.2.0.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0073", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "weblogic_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "10.3.0.0.0", "version_affected" : "=" } ] } }, { "product_name" : "weblogic_server_component", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39439", "name" : "39439", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html", "name" : "http://www.oracle.com/technology/deploy/security/alerts/alert-cve-2010-0073.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html", "name" : "TA10-103B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0216", "name" : "ADV-2010-0216", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebLogic Server in Oracle WebLogic Server 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, and 10.3.2 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server:10.3.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:6.1:sp7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:7.0:sp7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:8.1:sp6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:9.2:mp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:10.0:mp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:weblogic_server_component:10.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T17:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0074", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "bea_product_suite", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 7.0SP7, 8.1SP6, 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:7.0:sp7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:8.1:sp6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0075", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Oracle HRMS (Self Service) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.1 allows remote attackers to affect confidentiality via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0076", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "database", "version" : { "version_data" : [ { "version_value" : "3.2.1.00.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:database:3.2.1.00.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0077", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "e-business_suite", "version" : { "version_data" : [ { "version_value" : "11.5.10.2", "version_affected" : "=" }, { "version_value" : "12.0.6", "version_affected" : "=" }, { "version_value" : "12.1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the CRM Technical Foundation (mobile) component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote attackers to affect confidentiality and integrity via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:11.5.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:e-business_suite:12.1.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0078", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "bea_product_suite", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 9.0, 9.1, 9.2MP3, 10.0MP2, and 10.3.1 allows remote attackers to affect availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:9.2:mp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.0:mp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:10.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0079", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "bea_product_suite", "version" : { "version_data" : [ { "version_value" : "r27.6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2, 5, and 6 allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: this CVE identifier overlaps CVE-2009-3867, CVE-2009-3868, CVE-2009-3869, CVE-2009-3871, CVE-2009-3872, CVE-2009-3873, CVE-2009-3874, CVE-2009-3875, CVE-2009-3876, and CVE-2009-3877." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:bea_product_suite:r27.6.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0080", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "jd_edwards_enterpriseone", "version" : { "version_data" : [ { "version_value" : "8.9", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" } ] } }, { "product_name" : "peoplesoft_enterprise", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujan2010-084891.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-012A.html", "name" : "TA10-012A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the PeopleSoft Enterprise HCM - eProfile component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.9 Bundle, #21 and 9.0 Bundle #11 allows remote authenticated users to affect confidentiality and integrity via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:8.9:bundle21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:jd_edwards_enterpriseone:9.0:bundle11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:peoplesoft_enterprise:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0081", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "fusion_middleware", "version" : { "version_data" : [ { "version_value" : "10.1.2.3", "version_affected" : "=" }, { "version_value" : "10.1.4.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Application Server Control component in Oracle Fusion Middleware 10.1.2.3 and 10.1.4.0.1 allows remote authenticated users to affect integrity via unknown vectors, a different vulnerability than CVE-2010-2381." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:10.1.4.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-07-13T21:30Z", "lastModifiedDate" : "2016-11-23T18:19Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0082", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_2", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11576", "name" : "oval:org.mitre.oval:def:11576", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13934", "name" : "oval:org.mitre.oval:def:13934", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0083", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "opensolaris", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Oracle OpenSolaris 8, 9, and 10 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:oracle:opensolaris:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:oracle:opensolaris:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:oracle:opensolaris:10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-07-13T22:30Z", "lastModifiedDate" : "2012-10-23T03:17Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0084", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://osvdb.org/63482", "name" : "63482", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11120", "name" : "oval:org.mitre.oval:def:11120", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14061", "name" : "oval:org.mitre.oval:def:14061", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0091." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0085", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_2", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10474", "name" : "oval:org.mitre.oval:def:10474", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13803", "name" : "oval:org.mitre.oval:def:13803", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0088." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0086", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "oracle", "product" : { "product_data" : [ { "product_name" : "fusion_middleware", "version" : { "version_data" : [ { "version_value" : "10.1.2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39439", "name" : "39439", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023869", "name" : "1023869", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html", "name" : "TA10-103B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Portal component in Oracle Fusion Middleware 10.1.2.3 allows remote attackers to affect integrity via unknown vectors, a different vulnerability than CVE-2010-0855." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:oracle:fusion_middleware:10.1.2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-13T22:30Z", "lastModifiedDate" : "2016-11-19T03:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0087", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_2", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13959", "name" : "oval:org.mitre.oval:def:13959", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0088", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_2", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.0_01", "version_affected" : "=" }, { "version_value" : "1.3.0_02", "version_affected" : "=" }, { "version_value" : "1.3.0_03", "version_affected" : "=" }, { "version_value" : "1.3.0_04", "version_affected" : "=" }, { "version_value" : "1.3.0_05", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.1_01", "version_affected" : "=" }, { "version_value" : "1.3.1_01a", "version_affected" : "=" }, { "version_value" : "1.3.1_02", "version_affected" : "=" }, { "version_value" : "1.3.1_03", "version_affected" : "=" }, { "version_value" : "1.3.1_04", "version_affected" : "=" }, { "version_value" : "1.3.1_05", "version_affected" : "=" }, { "version_value" : "1.3.1_06", "version_affected" : "=" }, { "version_value" : "1.3.1_07", "version_affected" : "=" }, { "version_value" : "1.3.1_08", "version_affected" : "=" }, { "version_value" : "1.3.1_09", "version_affected" : "=" }, { "version_value" : "1.3.1_10", "version_affected" : "=" }, { "version_value" : "1.3.1_11", "version_affected" : "=" }, { "version_value" : "1.3.1_12", "version_affected" : "=" }, { "version_value" : "1.3.1_13", "version_affected" : "=" }, { "version_value" : "1.3.1_14", "version_affected" : "=" }, { "version_value" : "1.3.1_15", "version_affected" : "=" }, { "version_value" : "1.3.1_16", "version_affected" : "=" }, { "version_value" : "1.3.1_17", "version_affected" : "=" }, { "version_value" : "1.3.1_18", "version_affected" : "=" }, { "version_value" : "1.3.1_19", "version_affected" : "=" }, { "version_value" : "1.3.1_20", "version_affected" : "=" }, { "version_value" : "1.3.1_21", "version_affected" : "=" }, { "version_value" : "1.3.1_22", "version_affected" : "=" }, { "version_value" : "1.3.1_23", "version_affected" : "=" }, { "version_value" : "1.3.1_24", "version_affected" : "=" }, { "version_value" : "1.3.1_25", "version_affected" : "=" }, { "version_value" : "1.3.1_26", "version_affected" : "=" }, { "version_value" : "1.3.1_27", "version_affected" : "<=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11173", "name" : "oval:org.mitre.oval:def:11173", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14321", "name" : "oval:org.mitre.oval:def:14321", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0085." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.0_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_01a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.3.1_26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.3.1_27" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0089", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14208", "name" : "oval:org.mitre.oval:def:14208", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect availability via unknown vectors." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0090", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14237", "name" : "oval:org.mitre.oval:def:14237", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and availability via unknown vectors." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-10T19:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0091", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://osvdb.org/63481", "name" : "63481", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13492", "name" : "oval:org.mitre.oval:def:13492", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9855", "name" : "oval:org.mitre.oval:def:9855", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2010-0084." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0092", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10057", "name" : "oval:org.mitre.oval:def:10057", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14210", "name" : "oval:org.mitre.oval:def:14210", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-10T19:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0093", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://osvdb.org/63485", "name" : "63485", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14288", "name" : "oval:org.mitre.oval:def:14288", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9877", "name" : "oval:org.mitre.oval:def:9877", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0095." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0094", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510527/100/0/threaded", "name" : "20100405 ZDI-10-051: Sun Java Runtime RMIConnectionImpl Privileged Context Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-051", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-051", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10851", "name" : "oval:org.mitre.oval:def:10851", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14351", "name" : "oval:org.mitre.oval:def:14351", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the March 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is due to missing privilege checks during deserialization of RMIConnectionImpl objects, which allows remote attackers to call system-level Java functions via the ClassLoader of a constructor that is being deserialized." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-10T19:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0095", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "jdk", "version" : { "version_data" : [ { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "jre", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_2", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.6.0", "version_affected" : "=" } ] } }, { "product_name" : "sdk", "version" : { "version_data" : [ { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.2_1", "version_affected" : "=" }, { "version_value" : "1.4.2_02", "version_affected" : "=" }, { "version_value" : "1.4.2_3", "version_affected" : "=" }, { "version_value" : "1.4.2_4", "version_affected" : "=" }, { "version_value" : "1.4.2_5", "version_affected" : "=" }, { "version_value" : "1.4.2_6", "version_affected" : "=" }, { "version_value" : "1.4.2_7", "version_affected" : "=" }, { "version_value" : "1.4.2_8", "version_affected" : "=" }, { "version_value" : "1.4.2_9", "version_affected" : "=" }, { "version_value" : "1.4.2_10", "version_affected" : "=" }, { "version_value" : "1.4.2_11", "version_affected" : "=" }, { "version_value" : "1.4.2_12", "version_affected" : "=" }, { "version_value" : "1.4.2_13", "version_affected" : "=" }, { "version_value" : "1.4.2_14", "version_affected" : "=" }, { "version_value" : "1.4.2_15", "version_affected" : "=" }, { "version_value" : "1.4.2_16", "version_affected" : "=" }, { "version_value" : "1.4.2_17", "version_affected" : "=" }, { "version_value" : "1.4.2_18", "version_affected" : "=" }, { "version_value" : "1.4.2_19", "version_affected" : "=" }, { "version_value" : "1.4.2_20", "version_affected" : "=" }, { "version_value" : "1.4.2_21", "version_affected" : "=" }, { "version_value" : "1.4.2_22", "version_affected" : "=" }, { "version_value" : "1.4.2_23", "version_affected" : "=" }, { "version_value" : "1.4.2_24", "version_affected" : "=" }, { "version_value" : "1.4.2_25", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://itrc.hp.com/service/cki/docDisplay.do?docId=emr_na-c02273751", "name" : "SSRT100179", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00001.html", "name" : "SUSE-SR:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557596201693&w=2", "name" : "SSRT100089", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=134254866602253&w=2", "name" : "HPSBMU02799", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39292", "name" : "39292", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39317", "name" : "39317", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39659", "name" : "39659", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40545", "name" : "40545", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43308", "name" : "43308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-923-1", "name" : "USN-923-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:084", "name" : "MDVSA-2010:084", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "name" : "http://www.oracle.com/technetwork/topics/security/javacpumar2010-083341.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0337.html", "name" : "RHSA-2010:0337", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0338.html", "name" : "RHSA-2010:0338", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0339.html", "name" : "RHSA-2010:0339", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0383.html", "name" : "RHSA-2010:0383", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0471.html", "name" : "RHSA-2010:0471", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1454", "name" : "ADV-2010-1454", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1793", "name" : "ADV-2010-1793", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11621", "name" : "oval:org.mitre.oval:def:11621", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14105", "name" : "oval:org.mitre.oval:def:14105", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2010-0093." }, { "lang" : "en", "value" : "Per: http://www.oracle.com/technology/deploy/security/critical-patch-updates/javacpumar2010.html\r\n\r\n\r\n\r\n'Affected product releases and versions:\r\n• Java SE: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris, and Linux\r\n\t \r\n\r\n • JDK 5.0 Update 23 and earlier for Solaris\r\n\t \r\n\r\n • SDK 1.4.2_25 and earlier for Solaris\r\n\t \r\n• Java for Business: \t \r\n\r\n • JDK and JRE 6 Update 18 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • JDK and JRE 5.0 Update 23 and earlier for Windows, Solaris and Linux\r\n\t \r\n\r\n • SDK and JRE 1.4.2_25 and earlier for Windows, Solaris and Linux'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update1_b06:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update_18:*:*:*:*:*:*", "versionEndIncluding" : "1.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.6.0:update_7:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:sdk:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update15:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update16:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update17:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update18:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update19:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update20:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update21:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:update23:*:*:*:*:*:*", "versionEndIncluding" : "1.5.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:1.4.2_24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:jre:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.2_25" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-01T16:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0097", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.5.0", "version_affected" : "=" }, { "version_value" : "9.5.1", "version_affected" : "=" }, { "version_value" : "9.5.2", "version_affected" : "=" }, { "version_value" : "9.6", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "9.6.1", "version_affected" : "=" }, { "version_value" : "9.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt", "name" : "ftp://ftp.sco.com/pub/unixware7/714/security/p535243_uw7/p535243b.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/Security-announce/2011//Oct/msg00003.html", "name" : "APPLE-SA-2011-10-12-3", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034196.html", "name" : "FEDORA-2010-0861", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-January/034202.html", "name" : "FEDORA-2010-0868", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127195582210247&w=2", "name" : "SSRT100004", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38169", "name" : "38169", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38219", "name" : "38219", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38240", "name" : "38240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39334", "name" : "39334", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39582", "name" : "39582", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40086", "name" : "40086", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023474", "name" : "1023474", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021798.1-1", "name" : "1021798", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT5002", "name" : "http://support.apple.com/kb/HT5002", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "name" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2054", "name" : "DSA-2054", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/360341", "name" : "VU#360341", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:021", "name" : "MDVSA-2010:021", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.osvdb.org/61853", "name" : "61853", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37865", "name" : "37865", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-888-1", "name" : "USN-888-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0176", "name" : "ADV-2010-0176", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0622", "name" : "ADV-2010-0622", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0981", "name" : "ADV-2010-0981", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1352", "name" : "ADV-2010-1352", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=554851", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=554851", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55753", "name" : "bind-dnssecnsec-cache-poisoning(55753)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488", "name" : "https://h20564.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04952488", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12205", "name" : "oval:org.mitre.oval:def:12205", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7212", "name" : "oval:org.mitre.oval:def:7212", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7430", "name" : "oval:org.mitre.oval:def:7430", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9357", "name" : "oval:org.mitre.oval:def:9357", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0062.html", "name" : "RHSA-2010:0062", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html", "name" : "RHSA-2010:0095", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://www.isc.org/advisories/CVE-2010-0097", "name" : "https://www.isc.org/advisories/CVE-2010-0097", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta does not properly validate DNSSEC (1) NSEC and (2) NSEC3 records, which allows remote attackers to add the Authenticated Data (AD) flag to a forged NXDOMAIN response for an existing domain." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:*:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:b1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r2:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r3:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r4:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r4-p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r5:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r5-b1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r5-p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:r5-rc1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:a7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:p2_w1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:p2_w2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.2:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.5.2:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:*:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r2:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r3:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r4:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r4_p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r5:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r5_b1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r5_p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r6:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r6_b1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r6_rc1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r6_rc2:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r7:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r7_p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r7_p2:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r9:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6:r9_p1:*:*:esv:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0098", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "clamav", "product" : { "product_data" : [ { "product_name" : "clamav", "version" : { "version_data" : [ { "version_value" : "0.01", "version_affected" : "=" }, { "version_value" : "0.02", "version_affected" : "=" }, { "version_value" : "0.03", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.05", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.12", "version_affected" : "=" }, { "version_value" : "0.13", "version_affected" : "=" }, { "version_value" : "0.14", "version_affected" : "=" }, { "version_value" : "0.15", "version_affected" : "=" }, { "version_value" : "0.20", "version_affected" : "=" }, { "version_value" : "0.21", "version_affected" : "=" }, { "version_value" : "0.22", "version_affected" : "=" }, { "version_value" : "0.23", "version_affected" : "=" }, { "version_value" : "0.24", "version_affected" : "=" }, { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.52", "version_affected" : "=" }, { "version_value" : "0.53", "version_affected" : "=" }, { "version_value" : "0.54", "version_affected" : "=" }, { "version_value" : "0.60", "version_affected" : "=" }, { "version_value" : "0.60p", "version_affected" : "=" }, { "version_value" : "0.65", "version_affected" : "=" }, { "version_value" : "0.66", "version_affected" : "=" }, { "version_value" : "0.67", "version_affected" : "=" }, { "version_value" : "0.67-1", "version_affected" : "=" }, { "version_value" : "0.68", "version_affected" : "=" }, { "version_value" : "0.68.1", "version_affected" : "=" }, { "version_value" : "0.70", "version_affected" : "=" }, { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "0.72", "version_affected" : "=" }, { "version_value" : "0.73", "version_affected" : "=" }, { "version_value" : "0.74", "version_affected" : "=" }, { "version_value" : "0.75", "version_affected" : "=" }, { "version_value" : "0.75.1", "version_affected" : "=" }, { "version_value" : "0.80", "version_affected" : "=" }, { "version_value" : "0.81", "version_affected" : "=" }, { "version_value" : "0.82", "version_affected" : "=" }, { "version_value" : "0.83", "version_affected" : "=" }, { "version_value" : "0.84", "version_affected" : "=" }, { "version_value" : "0.85", "version_affected" : "=" }, { "version_value" : "0.85.1", "version_affected" : "=" }, { "version_value" : "0.86", "version_affected" : "=" }, { "version_value" : "0.86.1", "version_affected" : "=" }, { "version_value" : "0.86.2", "version_affected" : "=" }, { "version_value" : "0.87", "version_affected" : "=" }, { "version_value" : "0.87.1", "version_affected" : "=" }, { "version_value" : "0.88", "version_affected" : "=" }, { "version_value" : "0.88.1", "version_affected" : "=" }, { "version_value" : "0.88.2", "version_affected" : "=" }, { "version_value" : "0.88.3", "version_affected" : "=" }, { "version_value" : "0.88.4", "version_affected" : "=" }, { "version_value" : "0.88.5", "version_affected" : "=" }, { "version_value" : "0.88.6", "version_affected" : "=" }, { "version_value" : "0.88.7", "version_affected" : "=" }, { "version_value" : "0.90", "version_affected" : "=" }, { "version_value" : "0.90.1", "version_affected" : "=" }, { "version_value" : "0.90.2", "version_affected" : "=" }, { "version_value" : "0.90.3", "version_affected" : "=" }, { "version_value" : "0.91", "version_affected" : "=" }, { "version_value" : "0.91.1", "version_affected" : "=" }, { "version_value" : "0.91.2", "version_affected" : "=" }, { "version_value" : "0.92", "version_affected" : "=" }, { "version_value" : "0.92.1", "version_affected" : "=" }, { "version_value" : "0.93", "version_affected" : "=" }, { "version_value" : "0.93.1", "version_affected" : "=" }, { "version_value" : "0.93.2", "version_affected" : "=" }, { "version_value" : "0.93.3", "version_affected" : "=" }, { "version_value" : "0.94", "version_affected" : "=" }, { "version_value" : "0.94.1", "version_affected" : "=" }, { "version_value" : "0.94.2", "version_affected" : "=" }, { "version_value" : "0.95", "version_affected" : "=" }, { "version_value" : "0.95.1", "version_affected" : "=" }, { "version_value" : "0.95.2", "version_affected" : "=" }, { "version_value" : "0.95.3", "version_affected" : "=" }, { "version_value" : "0.96", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "clamavs", "product" : { "product_data" : [ { "product_name" : "clamav", "version" : { "version_data" : [ { "version_value" : "0.04", "version_affected" : "=" }, { "version_value" : "0.06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96", "name" : "http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html", "name" : "APPLE-SA-2010-08-24-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html", "name" : "SUSE-SR:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39293", "name" : "39293", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39329", "name" : "39329", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39656", "name" : "39656", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4312", "name" : "http://support.apple.com/kb/HT4312", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:082", "name" : "MDVSA-2010:082", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/04/06/4", "name" : "[oss-security] 20100406 ClamAV small issues", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/04/08/3", "name" : "[oss-security] 20100407 Re: ClamAV small issues", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39262", "name" : "39262", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.ubuntu.com/usn/USN-926-1", "name" : "USN-926-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0827", "name" : "ADV-2010-0827", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0832", "name" : "ADV-2010-0832", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0909", "name" : "ADV-2010-0909", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1001", "name" : "ADV-2010-1001", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1206", "name" : "ADV-2010-1206", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826", "name" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=1826", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ClamAV before 0.96 does not properly handle the (1) CAB and (2) 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.03:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.14:pre:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.60p:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.66:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.67:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.67-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.68:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.68.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.70:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.70:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.72:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.73:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.74:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.75:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.75.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.80:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.80:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.80:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.80:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.80:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.81:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.82:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.83:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.84:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.84:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.84:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.85:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.85.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.86:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.86:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.86.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.86.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.87:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.87.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.88.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90:rc1.1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.90.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.91:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.91:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.91:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.91.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.91.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.92:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.92.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.93:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.93.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.93.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.93.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.94:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.94.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.94.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.95.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:0.96:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamav:clamav:*:rc2:*:*:*:*:*:*", "versionEndIncluding" : "0.96" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamavs:clamav:0.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:clamavs:clamav:0.06:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-08T17:30Z", "lastModifiedDate" : "2010-08-31T05:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0099", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-0092. Reason: This candidate is a duplicate of CVE-2010-0092. Notes: All CVE users should reference CVE-2010-0092 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2010-07-22T16:30Z", "lastModifiedDate" : "2010-07-22T16:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0101", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lexmark", "product" : { "product_data" : [ { "product_name" : "25xxn", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c510", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c52x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c53x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c540", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c543", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c544", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c546", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c73x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c77x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c78x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c920", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "c935dn", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e120", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e238", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e23x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e240", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e240n", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e250", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e260", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e33x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e34x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e350", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e360d", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e360dn", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e450", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e460", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "e462", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "n4000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "n4050e", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "n70xxe", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "n8120", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "n8130", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t430", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t64x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t650", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t652", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t654", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "t656", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "w840", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "w850", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x20x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x26x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x34x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x36x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x422", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x46x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x543", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x544", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x546", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x642", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x644", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x646", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x64xef", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x65x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x73x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x772e", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x782e", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x85x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x86x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "x94x", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.lexmark.com/index?page=content&id=TE87&locale=EN&userlocale=EN_US", "name" : "http://support.lexmark.com/index?page=content&id=TE87&locale=EN&userlocale=EN_US", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The embedded HTTP server in multiple Lexmark laser and inkjet printers and MarkNet devices, including X94x, W840, T656, N4000, E462, C935dn, 25xxN, and other models, allows remote attackers to cause a denial of service (operating system halt) via a malformed HTTP Authorization header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:25xxn:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c510:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c52x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c53x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c540:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c543:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c544:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c546:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c73x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c77x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c78x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c920:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:c935dn:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e120:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e238:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e23x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e240:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e240n:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e250:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e260:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e33x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e34x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e350:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e360d:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e360dn:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e450:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e460:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:e462:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:n4000:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:n4050e:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:n70xxe:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:n8120:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:n8130:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t430:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t64x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t650:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t652:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t654:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:t656:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:w840:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:w850:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x20x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x26x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x34x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x36x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x422:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x46x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x543:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x544:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x546:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x642:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x644:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x646:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x64xef:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x65x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x73x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x772e:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x782e:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x85x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x86x:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:lexmark:x94x:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-04T16:00Z", "lastModifiedDate" : "2010-05-07T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0103", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "energizer", "product" : { "product_data" : [ { "product_name" : "duo_usb", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kb.cert.org/vuls/id/154421", "name" : "VU#154421", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05", "name" : "http://www.marketwatch.com/story/energizer-announces-duo-charger-and-usb-charger-software-problem-2010-03-05", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38571", "name" : "38571", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.symantec.com/connect/blogs/trojan-found-usb-battery-charger-software", "name" : "http://www.symantec.com/connect/blogs/trojan-found-usb-battery-charger-software", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "UsbCharger.dll in the Energizer DUO USB battery charger software contains a backdoor that is implemented through the Arucer.dll file in the %WINDIR%\\system32 directory, which allows remote attackers to download arbitrary programs onto a Windows PC, and execute these programs, via a request to TCP port 7777." }, { "lang" : "en", "value" : "Per: http://www.energizer.com/usbcharger/download/March_8_2010_USB_Release__3_.pdf\r\n\r\n\r\n\"Energizer has discontinued sale of this product and has removed the site to download the software. In addition, the company is directing consumers that downloaded the Windows version of the software to uninstall or otherwise remove the software from your computer.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:energizer:duo_usb:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T20:13Z", "lastModifiedDate" : "2010-03-10T20:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0104", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "broadcom", "product" : { "product_data" : [ { "product_name" : "broadcom", "version" : { "version_data" : [ { "version_value" : "integrated_nic_management_firmware", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c02048471", "name" : "HPSBGN02511", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39003", "name" : "39003", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023710", "name" : "1023710", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/512705", "name" : "VU#512705", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/38759", "name" : "38759", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0631", "name" : "ADV-2010-0631", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Broadcom Integrated NIC Management Firmware 1.x before 1.40.0.0 and 8.x before 8.08 on the HP Small Form Factor and Microtower platforms allows remote attackers to execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:broadcom:broadcom:*:1.24.0.9:*:*:*:*:*:*", "versionEndIncluding" : "integrated_nic_management_firmware" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_6005_pro_microtower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_6005_small_form_factor_pc:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:broadcom:broadcom:*:8.0.4:*:*:*:*:*:*", "versionEndIncluding" : "integrated_nic_management_firmware" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5700_pro_microtower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5700_small_form_factor_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5750_microtower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5750_small_form_factor_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5850_microtower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc5850_small_form_factor_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc7600_convertible_minitower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc7600_desktop_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc7600_small_form_factor_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dc7600_ultra-slim_desktop_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_dx7200_microtower_pc:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_rp3000_point_of_sale_system:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:hp:compaq_rp5700_point_of_sale_system:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-18T17:30Z", "lastModifiedDate" : "2019-10-09T22:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0105", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://securityreason.com/achievement_securityalert/83", "name" : "20100423 MacOS X 10.6.3 filesystem hfs Denial of Service Vulnerability", "refsource" : "SREASONRES", "tags" : [ "Exploit" ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39658", "name" : "39658", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securitytracker.com/id?1024723", "name" : "1024723", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The hfs implementation in Apple Mac OS X 10.5.8 and 10.6.x before 10.6.5 supports hard links to directories and does not prevent certain deeply nested directory structures, which allows local users to cause a denial of service (filesystem corruption) via a crafted application that calls the mkdir and link functions, related to the fsck_hfs program in the diskdev_cmds component." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-27T15:30Z", "lastModifiedDate" : "2010-12-10T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0106", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "antivirus", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.1.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.2.1", "version_affected" : "=" }, { "version_value" : "10.0.2.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.0.8", "version_affected" : "=" }, { "version_value" : "10.0.9", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.4.1", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.5.1", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.6.1", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" } ] } }, { "product_name" : "client_security", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.0.359", "version_affected" : "=" }, { "version_value" : "3.0.1.1000", "version_affected" : "=" }, { "version_value" : "3.0.1.1007", "version_affected" : "=" }, { "version_value" : "3.0.1.1008", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.2.2000", "version_affected" : "=" }, { "version_value" : "3.0.2.2001", "version_affected" : "=" }, { "version_value" : "3.0.2.2010", "version_affected" : "=" }, { "version_value" : "3.0.2.2011", "version_affected" : "=" }, { "version_value" : "3.0.2.2020", "version_affected" : "=" }, { "version_value" : "3.0.2.2021", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.396", "version_affected" : "=" }, { "version_value" : "3.1.0.401", "version_affected" : "=" }, { "version_value" : "3.1.394", "version_affected" : "=" }, { "version_value" : "3.1.400", "version_affected" : "=" }, { "version_value" : "3.1.401", "version_affected" : "=" } ] } }, { "product_name" : "endpoint_protection", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62414", "name" : "62414", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38653", "name" : "38653", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38219", "name" : "38219", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023621", "name" : "1023621", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_00", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0410", "name" : "ADV-2010-0410", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56354", "name" : "symantec-ondemand-dos(56354)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The on-demand scanning in Symantec AntiVirus 10.0.x and 10.1.x before MR9, AntiVirus 10.2.x, and Client Security 3.0.x and 3.1.x before MR9, when Tamper protection is disabled, allows remote attackers to cause a denial of service (prevention of on-demand scanning) via \"specific events\" that prevent the user from having read access to unspecified resources." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-19T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0107", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "client_security", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1.1000", "version_affected" : "=" }, { "version_value" : "3.0.1.1001", "version_affected" : "=" }, { "version_value" : "3.0.1.1007", "version_affected" : "=" }, { "version_value" : "3.0.1.1008", "version_affected" : "=" }, { "version_value" : "3.0.1.1009", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.2.2000", "version_affected" : "=" }, { "version_value" : "3.0.2.2001", "version_affected" : "=" }, { "version_value" : "3.0.2.2002", "version_affected" : "=" }, { "version_value" : "3.0.2.2010", "version_affected" : "=" }, { "version_value" : "3.0.2.2011", "version_affected" : "=" }, { "version_value" : "3.0.2.2020", "version_affected" : "=" }, { "version_value" : "3.0.2.2021", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.396", "version_affected" : "=" }, { "version_value" : "3.1.0.401", "version_affected" : "=" }, { "version_value" : "3.1.396", "version_affected" : "=" }, { "version_value" : "3.1.400", "version_affected" : "=" }, { "version_value" : "3.1.401", "version_affected" : "=" } ] } }, { "product_name" : "norton_360", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" } ] } }, { "product_name" : "norton_antivirus", "version" : { "version_data" : [ { "version_value" : "2006", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "norton_internet_security", "version" : { "version_data" : [ { "version_value" : "2006", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62412", "name" : "62412", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38654", "name" : "38654", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509717/100/0/threaded", "name" : "20100224 VUPEN Security Research - Symantec Products \"SYMLTCOM.dll\" Buffer Overflow Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38217", "name" : "38217", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023628", "name" : "1023628", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023629", "name" : "1023629", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023630", "name" : "1023630", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023631", "name" : "1023631", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0411", "name" : "ADV-2010-0411", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56357", "name" : "symantec-symltcom-activex-bo(56357)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in an ActiveX control (SYMLTCOM.dll) in Symantec N360 1.0 and 2.0; Norton Internet Security, AntiVirus, SystemWorks, and Confidential 2006 through 2008; and Symantec Client Security 3.0.x before 3.1 MR9, and 3.1.x before MR9; allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors. NOTE: this is only a vulnerability if the attacker can \"masquerade as an authorized site.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1009:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2002:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.396:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_360:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_360:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2006:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2007:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_antivirus:2008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2006:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2007:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:norton_internet_security:2008:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-23T20:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0108", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "antivirus", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.1.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.2.1", "version_affected" : "=" }, { "version_value" : "10.0.2.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.0.8", "version_affected" : "=" }, { "version_value" : "10.0.9", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.4.1", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.5.1", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.6.1", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" } ] } }, { "product_name" : "client_security", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.0.359", "version_affected" : "=" }, { "version_value" : "3.0.1.1000", "version_affected" : "=" }, { "version_value" : "3.0.1.1007", "version_affected" : "=" }, { "version_value" : "3.0.1.1008", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.2.2000", "version_affected" : "=" }, { "version_value" : "3.0.2.2001", "version_affected" : "=" }, { "version_value" : "3.0.2.2010", "version_affected" : "=" }, { "version_value" : "3.0.2.2011", "version_affected" : "=" }, { "version_value" : "3.0.2.2020", "version_affected" : "=" }, { "version_value" : "3.0.2.2021", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.396", "version_affected" : "=" }, { "version_value" : "3.1.0.401", "version_affected" : "=" }, { "version_value" : "3.1.394", "version_affected" : "=" }, { "version_value" : "3.1.400", "version_affected" : "=" }, { "version_value" : "3.1.401", "version_affected" : "=" } ] } }, { "product_name" : "endpoint_protection", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://dsecrg.com/pages/vul/show.php?id=139", "name" : "http://dsecrg.com/pages/vul/show.php?id=139", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38651", "name" : "38651", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509681/100/0/threaded", "name" : "20100219 [DSECRG-09-039] Symantec Antivirus 10.0 ActiveX - buffer Overflow.", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38222", "name" : "38222", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100217_02", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0412", "name" : "ADV-2010-0412", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56355", "name" : "scp-cliproxy-activex-bo(56355)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the cliproxy.objects.1 ActiveX control in the Symantec Client Proxy (CLIproxy.dll) in Symantec AntiVirus 10.0.x, 10.1.x before MR9, and 10.2.x before MR4; and Symantec Client Security 3.0.x and 3.1.x before MR9 allows remote attackers to execute arbitrary code via a long argument to the SetRemoteComputerName function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:mr1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0:mr2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.0.359:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1007:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.1.1008:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2010:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2020:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.0.2.2021:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1:mr7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.396:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.0.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.394:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.400:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:client_security:3.1.401:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-19T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0109", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "altiris_deployment_solution", "version" : { "version_data" : [ { "version_value" : "6.9", "version_affected" : "=" }, { "version_value" : "6.9.164", "version_affected" : "=" }, { "version_value" : "6.9.176", "version_affected" : "=" }, { "version_value" : "6.9.355", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/bid/38410", "name" : "38410", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20100420_00", "name" : "https://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20100420_00", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DBManager in Symantec Altiris Deployment Solution 6.9.x before DS 6.9 SP4 allows remote attackers to cause a denial of service via a crafted request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.164:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.176:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:altiris_deployment_solution:6.9.355:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV3" : { "cvssV3" : { "version" : "3.0", "vectorString" : "CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "attackVector" : "ADJACENT_NETWORK", "attackComplexity" : "LOW", "privilegesRequired" : "NONE", "userInteraction" : "NONE", "scope" : "UNCHANGED", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "HIGH", "baseScore" : 6.5, "baseSeverity" : "MEDIUM" }, "exploitabilityScore" : 2.8, "impactScore" : 3.6 }, "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 6.5, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2018-02-19T19:29Z", "lastModifiedDate" : "2018-03-18T16:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0110", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "antivirus", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.1.1", "version_affected" : "=" }, { "version_value" : "10.0.1.2", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.2.1", "version_affected" : "=" }, { "version_value" : "10.0.2.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.0.8", "version_affected" : "=" }, { "version_value" : "10.0.9", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.4.1", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.5.1", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.6.1", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.1.8", "version_affected" : "=" }, { "version_value" : "10.1.9", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" } ] } }, { "product_name" : "antivirus_central_quarantine_server", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "system_center", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/43099", "name" : "43099", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43106", "name" : "43106", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024996", "name" : "1024996", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/45936", "name" : "45936", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_00", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0234", "name" : "ADV-2011-0234", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-028", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-028", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-030", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-030", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-031", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-031", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-032", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-032", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64940", "name" : "symantec-intel-ams2-bo(64940)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allow remote attackers to execute arbitrary code via (1) a long string to msgsys.exe, related to the AMSSendAlertAct function in AMSLIB.dll in the Intel Alert Handler service (aka Symantec Intel Handler service); a long (2) modem string or (3) PIN number to msgsys.exe, related to pagehndl.dll in the Intel Alert Handler service; or (4) a message to msgsys.exe, related to iao.exe in the Intel Alert Originator service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.8:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.9:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:system_center:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:system_center:10.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.9 }, "severity" : "HIGH", "exploitabilityScore" : 5.5, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2011-01-31T21:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0111", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "antivirus", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.1.1", "version_affected" : "=" }, { "version_value" : "10.0.1.2", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.2.1", "version_affected" : "=" }, { "version_value" : "10.0.2.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.0.5", "version_affected" : "=" }, { "version_value" : "10.0.6", "version_affected" : "=" }, { "version_value" : "10.0.7", "version_affected" : "=" }, { "version_value" : "10.0.8", "version_affected" : "=" }, { "version_value" : "10.0.9", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.0.1", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.4.1", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.1.5.1", "version_affected" : "=" }, { "version_value" : "10.1.6", "version_affected" : "=" }, { "version_value" : "10.1.6.1", "version_affected" : "=" }, { "version_value" : "10.1.7", "version_affected" : "=" }, { "version_value" : "10.1.8", "version_affected" : "=" }, { "version_value" : "10.1.9", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" } ] } }, { "product_name" : "antivirus_central_quarantine_server", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "system_center", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/43099", "name" : "43099", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43106", "name" : "43106", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024997", "name" : "1024997", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/45935", "name" : "45935", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110126_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0234", "name" : "ADV-2011-0234", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-029", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-029", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64942", "name" : "symantec-intelams2-code-execution(64942)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64943", "name" : "symantec-intelams2-dos(64943)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HDNLRSVC.EXE in the Intel Alert Handler service (aka Symantec Intel Handler service) in Intel Alert Management System (aka AMS or AMS2), as used in Symantec AntiVirus Corporate Edition (SAVCE) 10.x before 10.1 MR10, Symantec System Center (SSC) 10.x, and Symantec Quarantine Server 3.5 and 3.6, allows remote attackers to execute arbitrary programs by sending msgsys.exe a UNC share pathname, which is used directly in a CreateProcessA (aka CreateProcess) call." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:mr1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.1.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.2.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.3:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.8:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.0.9:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mp1:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr4:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr5:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr6:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1:mr7:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.0.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.4.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.5.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.6.1:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.7:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.8:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.1.9:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:*:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr2:corporate:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus:10.2:mr3:corporate:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:system_center:10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:system_center:10.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:antivirus_central_quarantine_server:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2011-01-31T21:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0112", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "im_manager", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.5", "version_affected" : "=" }, { "version_value" : "8.3", "version_affected" : "=" }, { "version_value" : "8.4.0", "version_affected" : "=" }, { "version_value" : "8.4.1", "version_affected" : "=" }, { "version_value" : "8.4.2", "version_affected" : "=" }, { "version_value" : "8.4.5", "version_affected" : "=" }, { "version_value" : "8.4.6", "version_affected" : "=" }, { "version_value" : "8.4.7", "version_affected" : "=" }, { "version_value" : "8.4.8", "version_affected" : "=" }, { "version_value" : "8.4.9", "version_affected" : "=" }, { "version_value" : "8.4.10", "version_affected" : "=" }, { "version_value" : "8.4.11", "version_affected" : "=" }, { "version_value" : "8.4.12", "version_affected" : "=" }, { "version_value" : "8.4.13", "version_affected" : "=" }, { "version_value" : "8.4.15", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/68901", "name" : "68901", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://osvdb.org/68902", "name" : "68902", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://osvdb.org/68903", "name" : "68903", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41959", "name" : "41959", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/44299", "name" : "44299", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024648", "name" : "1024648", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101027_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101027_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2789", "name" : "ADV-2010-2789", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-220/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-220/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-221/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-221/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-222/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-222/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-223/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-223/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-224/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-224/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-225/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-225/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-226/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-226/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/62806", "name" : "immanager-unspecified-sql-injection(62806)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in the Administrative Interface in the IIS extension in Symantec IM Manager before 8.4.16 allow remote attackers to execute arbitrary SQL commands via (1) the rdReport parameter to rdpageimlogic.aspx, related to the sGetDefinition function in rdServer.dll, and SQL statements contained within a certain report file; (2) unspecified parameters in a DetailReportGroup (aka DetailReportGroup.lgx) action to rdpageimlogic.aspx; the (3) selclause, (4) whereTrendTimeClause, (5) TrendTypeForReport, (6) whereProtocolClause, or (7) groupClause parameter in a SummaryReportGroup (aka SummaryReportGroup.lgx) action to rdpageimlogic.aspx; the (8) loginTimeStamp, (9) dbo, (10) dateDiffParam, or (11) whereClause parameter in a LoggedInUsers (aka LoggedInUSers.lgx) action to (a) rdpageimlogic.aspx or (b) rdPage.aspx; the (12) selclause, (13) whereTrendTimeClause, (14) TrendTypeForReport, (15) whereProtocolClause, or (16) groupClause parameter to rdpageimlogic.aspx; (17) the groupList parameter to IMAdminReportTrendFormRun.asp; or (18) the email parameter to IMAdminScheduleReport.asp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:8.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:im_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8.4.15" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-10-28T20:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0113", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "mobile_security", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/69253", "name" : "69253", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/44767", "name" : "44767", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2982", "name" : "ADV-2010-2982", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/63294", "name" : "norton-mobile-setup-information-disclosure(63294)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Symantec Norton Mobile Security application 1.0 Beta for Android records setup details, possibly including wipe/lock credentials, in the device logs, which allows user-assisted remote attackers to obtain potentially sensitive information by leveraging the ability of a separate crafted application to read these logs." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mobile_security:1.0:beta:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-11-15T21:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0114", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "endpoint_protection", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.3001", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/42643", "name" : "42643", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024900", "name" : "1024900", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/45372", "name" : "45372", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101215_00", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3252", "name" : "ADV-2010-3252", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-291/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-291/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64118", "name" : "symantec-endpoint-fwcharts-code-execution(64118)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "fw_charts.php in the reporting module in the Manager (aka SEPM) component in Symantec Endpoint Protection (SEP) 11.x before 11 RU6 MP2 allows remote attackers to bypass intended restrictions on report generation, overwrite arbitrary PHP scripts, and execute arbitrary code via a crafted request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:ru5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:ru6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0:ru6mp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.1:mp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.2:mp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp1a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.4:mp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:endpoint_protection:11.0.3001:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-12-22T01:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0115", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "web_gateway", "version" : { "version_data" : [ { "version_value" : "4.5", "version_affected" : "=" }, { "version_value" : "4.5.0.325", "version_affected" : "=" }, { "version_value" : "4.5.0.326", "version_affected" : "=" }, { "version_value" : "4.5.0.327", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/70415", "name" : "70415", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42878", "name" : "42878", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/45742", "name" : "45742", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024958", "name" : "1024958", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2011&suid=20110112_00", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0088", "name" : "ADV-2011-0088", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-11-013/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-11-013/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64658", "name" : "symantec-web-username-sql-injection(64658)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in login.php in the GUI management console in Symantec Web Gateway 4.5 before 4.5.0.376 allows remote attackers to execute arbitrary SQL commands via the USERNAME parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_gateway:4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_gateway:4.5.0.325:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_gateway:4.5.0.326:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:web_gateway:4.5.0.327:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:symantec:web_gateway_appliance:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2011-01-14T23:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0116", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" } ] } }, { "product_name" : "realplayer_sp", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/41096", "name" : "41096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41154", "name" : "41154", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2010-3/", "name" : "http://secunia.com/secunia_research/2010-3/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://service.real.com/realplayer/security/08262010_player/en/", "name" : "http://service.real.com/realplayer/security/08262010_player/en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024370", "name" : "1024370", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2216", "name" : "ADV-2010-2216", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/61420", "name" : "realplayer-qcp-bo(61420)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7326", "name" : "oval:org.mitre.oval:def:7326", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows might allow remote attackers to execute arbitrary code via a crafted QCP file that triggers a heap-based buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-30T20:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0117", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" } ] } }, { "product_name" : "realplayer_sp", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/41096", "name" : "41096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41154", "name" : "41154", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2010-5/", "name" : "http://secunia.com/secunia_research/2010-5/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://service.real.com/realplayer/security/08262010_player/en/", "name" : "http://service.real.com/realplayer/security/08262010_player/en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024370", "name" : "1024370", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2216", "name" : "ADV-2010-2216", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/61421", "name" : "realplayer-yuv420-code-execution(61421)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7169", "name" : "oval:org.mitre.oval:def:7169", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows do not properly handle dimensions during YUV420 transformations, which might allow remote attackers to execute arbitrary code via crafted MP4 content." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-30T20:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0118", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "becauseinter", "product" : { "product_data" : [ { "product_name" : "bournal", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html", "name" : "FEDORA-2010-3301", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html", "name" : "FEDORA-2010-3221", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html", "name" : "FEDORA-2010-3168", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38554", "name" : "38554", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38814", "name" : "38814", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2010-6/", "name" : "http://secunia.com/secunia_research/2010-6/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509685/100/0/threaded", "name" : "20100222 Secunia Research: Bournal Insecure Temporary Files Security Issue", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38353", "name" : "38353", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T00:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0119", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "becauseinter", "product" : { "product_data" : [ { "product_name" : "bournal", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html", "name" : "FEDORA-2010-3301", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html", "name" : "FEDORA-2010-3221", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html", "name" : "FEDORA-2010-3168", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38723", "name" : "38723", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38814", "name" : "38814", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2010-7/", "name" : "http://secunia.com/secunia_research/2010-7/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509688/100/0/threaded", "name" : "20100222 Secunia Research: Bournal ccrypt Information Disclosure Security Issue", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38352", "name" : "38352", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to \"echoing.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:becauseinter:bournal:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T00:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0120", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" } ] } }, { "product_name" : "realplayer_sp", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/41096", "name" : "41096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41154", "name" : "41154", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/secunia_research/2010-8/", "name" : "http://secunia.com/secunia_research/2010-8/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://service.real.com/realplayer/security/08262010_player/en/", "name" : "http://service.real.com/realplayer/security/08262010_player/en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024370", "name" : "1024370", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2216", "name" : "ADV-2010-2216", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/61422", "name" : "realplayer-qcp-audio-bo(61422)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6807", "name" : "oval:org.mitre.oval:def:6807", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in RealNetworks RealPlayer 11.0 through 11.1 and RealPlayer SP 1.0 through 1.1.4 on Windows allows remote attackers to execute arbitrary code via large size values in QCP audio content." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-30T20:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0121", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.2.1744", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "12.0.0.1444", "version_affected" : "=" } ] } }, { "product_name" : "realplayer_sp", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://service.real.com/realplayer/security/12102010_player/en/", "name" : "http://service.real.com/realplayer/security/12102010_player/en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024861", "name" : "1024861", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The cook codec in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.5, Mac RealPlayer 11.0 through 12.0.0.1444, and Linux RealPlayer 11.0.2.1744 does not properly perform initialization, which has unspecified impact and attack vectors." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/665.html\r\n\r\n'CWE-665: Improper Initialization'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:12.0.0.1444:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.2.1744:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-12-14T16:00Z", "lastModifiedDate" : "2011-01-19T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0122", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "timeclock-software", "product" : { "product_data" : [ { "product_name" : "employee_timeclock_software", "version" : { "version_data" : [ { "version_value" : "0.99", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38739", "name" : "38739", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-11/", "name" : "http://secunia.com/secunia_research/2010-11/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/62831", "name" : "62831", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62832", "name" : "62832", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509995/100/0/threaded", "name" : "20100310 Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38639", "name" : "38639", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56799", "name" : "timeclock-auth-sql-injection(56799)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in Employee Timeclock Software 0.99 allow remote attackers to execute arbitrary SQL commands via the (1) username or (2) password parameter to (a) auth.php or (b) login_action.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:timeclock-software:employee_timeclock_software:0.99:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0123", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "timeclock-software", "product" : { "product_data" : [ { "product_name" : "employee_timeclock_software", "version" : { "version_data" : [ { "version_value" : "0.99", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38739", "name" : "38739", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-10/", "name" : "http://secunia.com/secunia_research/2010-10/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/62833", "name" : "62833", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509990/100/0/threaded", "name" : "20100310 Secunia Research: Employee Timeclock Software Backup Information Disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56798", "name" : "timeclock-database-info-disclosure(56798)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The database backup implementation in Employee Timeclock Software 0.99 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download a database via a direct request for a \"semi-predictable file name.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:timeclock-software:employee_timeclock_software:0.99:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0124", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "timeclock-software", "product" : { "product_data" : [ { "product_name" : "employee_timeclock_software", "version" : { "version_data" : [ { "version_value" : "0.99", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38739", "name" : "38739", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-12/", "name" : "http://secunia.com/secunia_research/2010-12/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/62830", "name" : "62830", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509996/100/0/threaded", "name" : "20100310 Secunia Research: Employee Timeclock Software \"mysqldump\" Password Disclosure", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38642", "name" : "38642", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56800", "name" : "timeclock-mysqldump-info-disclosure(56800)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Employee Timeclock Software 0.99 places the database password on the mysqldump command line, which allows local users to obtain sensitive information by listing the process." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:timeclock-software:employee_timeclock_software:0.99:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0125", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.0.1", "version_affected" : "=" }, { "version_value" : "11.0.2", "version_affected" : "=" }, { "version_value" : "11.0.3", "version_affected" : "=" }, { "version_value" : "11.0.4", "version_affected" : "=" }, { "version_value" : "11.0.5", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "12.0.0.1444", "version_affected" : "=" } ] } }, { "product_name" : "realplayer_sp", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://service.real.com/realplayer/security/12102010_player/en/", "name" : "http://service.real.com/realplayer/security/12102010_player/en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024861", "name" : "1024861", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.1.4, RealPlayer Enterprise 2.1.2, and Mac RealPlayer 11.0 through 12.0.0.1444 do not properly parse spectral data in AAC files, which has unspecified impact and remote attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer_sp:1.1.4:*:*:*:*:*:*:*" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:12.0.0.1444:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:2.1.2:*:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-12-14T16:00Z", "lastModifiedDate" : "2011-02-17T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0126", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "autonomy", "product" : { "product_data" : [ { "product_name" : "keyview_export_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_filter_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_viewer_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/secunia_research/2010-16/", "name" : "http://secunia.com/secunia_research/2010-16/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41928", "name" : "41928", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in an unspecified library in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted compound file, as demonstrated using a Quattro Pro file, which is not properly handled by the Quattro speed reader (qpssr.dll)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-17T20:00Z", "lastModifiedDate" : "2013-02-07T04:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0127", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "shockwave_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10.1.0.11", "version_affected" : "=" }, { "version_value" : "11.0.0.456", "version_affected" : "=" }, { "version_value" : "11.5.0.595", "version_affected" : "=" }, { "version_value" : "11.5.0.596", "version_affected" : "=" }, { "version_value" : "11.5.1.601", "version_affected" : "=" }, { "version_value" : "11.5.2.602", "version_affected" : "=" }, { "version_value" : "11.5.6.606", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38751", "name" : "38751", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-17/", "name" : "http://secunia.com/secunia_research/2010-17/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/511260/100/0/threaded", "name" : "20100512 Secunia Research: Adobe Shockwave Player 3D Parsing Memory Corruption", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1128", "name" : "ADV-2010-1128", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7477", "name" : "oval:org.mitre.oval:def:7477", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Shockwave Player before 11.5.7.609 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted FFFFFF45h Shockwave 3D blocks in a Shockwave file." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb10-12.html\r\n\r\n'Adobe recommends users of Adobe Shockwave Player 11.5.6.606 and earlier versions update to Adobe Shockwave Player 11.5.7.609'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5.6.606" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-13T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0128", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "director", "version" : { "version_data" : [ { "version_value" : "11.0.0.426", "version_affected" : "=" }, { "version_value" : "11.5", "version_affected" : "<=" } ] } }, { "product_name" : "shockwave_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10.1.0.11", "version_affected" : "=" }, { "version_value" : "11.0.0.456", "version_affected" : "=" }, { "version_value" : "11.5.0.595", "version_affected" : "=" }, { "version_value" : "11.5.0.596", "version_affected" : "=" }, { "version_value" : "11.5.1.601", "version_affected" : "=" }, { "version_value" : "11.5.2.602", "version_affected" : "=" }, { "version_value" : "11.5.6.606", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38751", "name" : "38751", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-19/", "name" : "http://secunia.com/secunia_research/2010-19/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.coresecurity.com/content/adobe-director-invalid-read", "name" : "http://www.coresecurity.com/content/adobe-director-invalid-read", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511240/100/0/threaded", "name" : "20100511 [CORE-2010-0405] Adobe Director Invalid Read", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511261/100/0/threaded", "name" : "20100512 Secunia Research: Adobe Shockwave Player Signedness Error Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1128", "name" : "ADV-2010-1128", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7273", "name" : "oval:org.mitre.oval:def:7273", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in dirapi.dll in Adobe Shockwave Player before 11.5.7.609 and Adobe Director before 11.5.7.609 allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir file that triggers an invalid read operation." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb10-12.html\r\n\r\n'Adobe recommends users of Adobe Shockwave Player 11.5.6.606 and earlier versions update to Adobe Shockwave Player 11.5.7.609'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:director:11.0.0.426:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:director:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5.6.606" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-13T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0129", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "shockwave_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10.1.0.11", "version_affected" : "=" }, { "version_value" : "11.0.0.456", "version_affected" : "=" }, { "version_value" : "11.5.0.595", "version_affected" : "=" }, { "version_value" : "11.5.0.596", "version_affected" : "=" }, { "version_value" : "11.5.1.601", "version_affected" : "=" }, { "version_value" : "11.5.2.602", "version_affected" : "=" }, { "version_value" : "11.5.6.606", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0138.html", "name" : "20100511 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://hi.baidu.com/fs_fx/blog/item/fa74a61705b5e24621a4e951.html", "name" : "http://hi.baidu.com/fs_fx/blog/item/fa74a61705b5e24621a4e951.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=869", "name" : "20100511 Abobe Shockwave Player Heap Memory Indexing Vulnerability", "refsource" : "IDEFENSE", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/38751", "name" : "38751", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-20/", "name" : "http://secunia.com/secunia_research/2010-20/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/511256/100/0/threaded", "name" : "20100512 [CAL-20100204-2]Adobe Shockwave Player Director File Parsing integer overflow vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511262/100/0/threaded", "name" : "20100512 Secunia Research: Adobe Shockwave Player Array Indexing Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40082", "name" : "40082", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1128", "name" : "ADV-2010-1128", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7134", "name" : "oval:org.mitre.oval:def:7134", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple integer overflows in Adobe Shockwave Player before 11.5.7.609 allow remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via a crafted .dir (aka Director) file that triggers an array index error." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb10-12.html\r\n\r\n'Adobe recommends users of Adobe Shockwave Player 11.5.6.606 and earlier versions update to Adobe Shockwave Player 11.5.7.609'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5.6.606" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-13T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0130", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "shockwave_player", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.5.1", "version_affected" : "=" }, { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10.1.0.11", "version_affected" : "=" }, { "version_value" : "11.0.0.456", "version_affected" : "=" }, { "version_value" : "11.5.0.595", "version_affected" : "=" }, { "version_value" : "11.5.0.596", "version_affected" : "=" }, { "version_value" : "11.5.1.601", "version_affected" : "=" }, { "version_value" : "11.5.2.602", "version_affected" : "=" }, { "version_value" : "11.5.6.606", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38751", "name" : "38751", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-22/", "name" : "http://secunia.com/secunia_research/2010-22/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/511263/100/0/threaded", "name" : "20100512 Secunia Research: Adobe Shockwave Player Integer Overflow Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40084", "name" : "40084", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1128", "name" : "ADV-2010-1128", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7108", "name" : "oval:org.mitre.oval:def:7108", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Adobe Shockwave Player before 11.5.7.609 might allow remote attackers to execute arbitrary code via a crafted .dir (aka Director) file." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb10-12.html\r\n\r\n'Adobe recommends users of Adobe Shockwave Player 11.5.6.606 and earlier versions update to Adobe Shockwave Player 11.5.7.609'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:8.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:10.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.0.0.456:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.595:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.0.596:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.1.601:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:11.5.2.602:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:shockwave_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "11.5.6.606" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-13T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0131", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "autonomy", "product" : { "product_data" : [ { "product_name" : "keyview_export_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_filter_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_viewer_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "symantec", "product" : { "product_data" : [ { "product_name" : "mail_security", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/secunia_research/2010-23/", "name" : "http://secunia.com/secunia_research/2010-23/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-25/", "name" : "http://secunia.com/secunia_research/2010-25/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41928", "name" : "41928", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the SpreadSheet Lotus 123 reader (wkssr.dll), as used in Autonomy KeyView 10.4 and 10.9, Symantec Mail Security, and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to floating point conversion in unknown record types." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:symantec:mail_security:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-17T20:00Z", "lastModifiedDate" : "2013-02-07T04:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0132", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "viewvc", "product" : { "product_data" : [ { "product_name" : "viewvc", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038420.html", "name" : "FEDORA-2010-5507", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038456.html", "name" : "FEDORA-2010-5524", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038925.html", "name" : "FEDORA-2010-5805", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html", "name" : "SUSE-SR:2010:009", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38918", "name" : "38918", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2010-26/", "name" : "http://secunia.com/secunia_research/2010-26/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD", "name" : "http://viewvc.tigris.org/source/browse/viewvc/trunk/CHANGES?r1=2342&r2=2359&pathrev=HEAD", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510408/100/0/threaded", "name" : "20100330 Secunia Research: ViewVC Regular Expression Search Cross-Site Scripting", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0743", "name" : "ADV-2010-0743", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0844", "name" : "ADV-2010-0844", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in ViewVC 1.1 before 1.1.5 and 1.0 before 1.0.11, when the regular expression search functionality is enabled, allows remote attackers to inject arbitrary web script or HTML via vectors related to \"search_re input,\" a different vulnerability than CVE-2010-0736." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viewvc:viewvc:1.1.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0133", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "autonomy", "product" : { "product_data" : [ { "product_name" : "keyview_export_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_filter_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_viewer_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/secunia_research/2010-28/", "name" : "http://secunia.com/secunia_research/2010-28/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41928", "name" : "41928", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in the SpreadSheet Lotus 123 reader (wkssr.dll) in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allow remote attackers to execute arbitrary code via unspecified vectors related to \"certain records.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-17T20:00Z", "lastModifiedDate" : "2013-02-07T04:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0134", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "autonomy", "product" : { "product_data" : [ { "product_name" : "keyview_export_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_filter_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_viewer_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/secunia_research/2010-27/", "name" : "http://secunia.com/secunia_research/2010-27/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41928", "name" : "41928", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in rtfsr.dll in Autonomy KeyView 10.4 and 10.9, as used in multiple IBM, Symantec, and other products, allows remote attackers to execute arbitrary code via a crafted \\ls keyword in a list override table entry in an RTF file, which triggers a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-08-17T20:00Z", "lastModifiedDate" : "2013-02-07T04:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0135", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "autonomy", "product" : { "product_data" : [ { "product_name" : "keyview_export_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_filter_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } }, { "product_name" : "keyview_viewer_sdk", "version" : { "version_data" : [ { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.9", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/secunia_research/2010-31/", "name" : "http://secunia.com/secunia_research/2010-31/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41928", "name" : "41928", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "name" : "http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20100727_01", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21440812", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the WordPerfect 5.x reader (wosr.dll), as used in Autonomy KeyView 10.4 and 10.9 and possibly other products, allows remote attackers to execute arbitrary code via unspecified vectors related to \"data blocks.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_export_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_filter_sdk:10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autonomy:keyview_viewer_sdk:10.9:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-17T20:00Z", "lastModifiedDate" : "2013-02-07T04:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0136", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "openoffice.org", "version" : { "version_data" : [ { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00005.html", "name" : "SUSE-SA:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38695", "name" : "38695", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38921", "name" : "38921", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023588", "name" : "1023588", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1995", "name" : "DSA-1995", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/debian-openoffice@lists.debian.org/msg23178.html", "name" : "[debian-openoffice] 20100212 ./packages/openofficeorg/3.1.1/unstable r1866: merge 1:3.1.1-15+squeeze1", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:221", "name" : "MDVSA-2010:221", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38245", "name" : "38245", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-903-1", "name" : "USN-903-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0635", "name" : "ADV-2010-0635", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2905", "name" : "ADV-2010-2905", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:3.1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-16T19:30Z", "lastModifiedDate" : "2010-11-11T06:44Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0137", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ios_xr", "version" : { "version_data" : [ { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.3", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.6.0", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" }, { "version_value" : "3.7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38227", "name" : "38227", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023480", "name" : "1023480", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b13512.shtml", "name" : "20100120 Cisco IOS XR Software SSH Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37878", "name" : "37878", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0183", "name" : "ADV-2010-0183", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55767", "name" : "ciscoios-ssh-dos(55767)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the sshd_child_handler process in the SSH server in Cisco IOS XR 3.4.1 through 3.7.0 allows remote attackers to cause a denial of service (process crash and memory consumption) via a crafted SSH2 packet, aka Bug ID CSCsu10574." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:cisco:ios_xr:3.7.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0138", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ciscoworks_internetwork_performance_monitor", "version" : { "version_data" : [ { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38230", "name" : "38230", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023484", "name" : "1023484", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1351d.shtml", "name" : "20100120 CiscoWorks Internetwork Performance Monitor CORBA GIOP Overflow Vulnerability", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37879", "name" : "37879", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0184", "name" : "ADV-2010-0184", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-004/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-004/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55768", "name" : "cisco-ipm-corba-bo(55768)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Cisco CiscoWorks Internetwork Performance Monitor (IPM) 2.6 and earlier on Windows, as distributed in CiscoWorks LAN Management Solution (LMS), allows remote attackers to execute arbitrary code via a malformed getProcessName CORBA General Inter-ORB Protocol (GIOP) request, related to a \"third-party component,\" aka Bug ID CSCsv62350." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_internetwork_performance_monitor:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_internetwork_performance_monitor:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:ciscoworks_internetwork_performance_monitor:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0139", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "unified_meetingplace", "version" : { "version_data" : [ { "version_value" : "5", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.170.0", "version_affected" : "=" }, { "version_value" : "6.0.244", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml", "name" : "20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37965", "name" : "37965", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.2, and possibly 5 does not properly validate SQL commands, which allows remote attackers to create, modify, or delete data in a database via unspecified vectors, aka Bug ID CSCtc39691." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0.170.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0.244:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 8.5, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2011-01-07T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0140", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "unified_meetingplace", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml", "name" : "20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37965", "name" : "37965", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple unspecified vulnerabilities in the web server in Cisco Unified MeetingPlace 7 before 7.0(2.3) hotfix 5F, 6 before 6.0.639.3, and possibly 5 allow remote attackers to create (1) user or (2) administrator accounts via a crafted URL in a request to the internal interface, aka Bug IDs CSCtc59231 and CSCtd40661." }, { "lang" : "en", "value" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml\r\n\r\n\r\nAffected Products\r\nVulnerable Products\r\n\r\nCisco Unified MeetingPlace versions 5, 6, and 7 are each affected by at least one of the vulnerabilities described in this document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:7.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2010-01-31T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0141", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "unified_meetingplace", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.170.0", "version_affected" : "=" }, { "version_value" : "6.0.244", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml", "name" : "20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37965", "name" : "37965", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote attackers to discover usernames, passwords, and unspecified other data from the user database via a modified authentication sequence to the Audio Server, aka Bug ID CSCsv76935." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0.170.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0.244:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 6.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2011-01-07T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0142", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "unified_meetingplace", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "5.3", "version_affected" : "=" }, { "version_value" : "5.4", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml", "name" : "20100127 Multiple Vulnerabilities in Cisco Unified MeetingPlace", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37965", "name" : "37965", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "MeetingTime in Cisco Unified MeetingPlace 6 before MR5, and possibly 5, allows remote authenticated users to gain privileges via a modified authentication sequence, aka Bug ID CSCsv66530." }, { "lang" : "en", "value" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1490b.shtml\r\n\r\n\r\nAffected Products\r\nVulnerable Products\r\n\r\nCisco Unified MeetingPlace versions 5, 6, and 7 are each affected by at least one of the vulnerabilities described in this document.\r\n\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:unified_meetingplace:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 6.8, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2010-01-31T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0143", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ironport_encryption_appliance", "version" : { "version_data" : [ { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.2.4.1", "version_affected" : "=" }, { "version_value" : "6.2.5", "version_affected" : "=" }, { "version_value" : "6.2.6", "version_affected" : "=" }, { "version_value" : "6.2.7", "version_affected" : "=" }, { "version_value" : "6.2.7.1", "version_affected" : "=" }, { "version_value" : "6.2.7.2", "version_affected" : "=" }, { "version_value" : "6.2.7.3", "version_affected" : "=" }, { "version_value" : "6.2.7.4", "version_affected" : "=" }, { "version_value" : "6.2.7.5", "version_affected" : "=" }, { "version_value" : "6.2.7.6", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.0.1", "version_affected" : "=" } ] } }, { "product_name" : "ironport_postx", "version" : { "version_data" : [ { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38525", "name" : "38525", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "name" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml", "name" : "20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the administrative interface in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65921." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-11T17:30Z", "lastModifiedDate" : "2010-02-26T07:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0144", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ironport_encryption_appliance", "version" : { "version_data" : [ { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.2.4.1", "version_affected" : "=" }, { "version_value" : "6.2.5", "version_affected" : "=" }, { "version_value" : "6.2.6", "version_affected" : "=" }, { "version_value" : "6.2.7", "version_affected" : "=" }, { "version_value" : "6.2.7.1", "version_affected" : "=" }, { "version_value" : "6.2.7.2", "version_affected" : "=" }, { "version_value" : "6.2.7.3", "version_affected" : "=" }, { "version_value" : "6.2.7.4", "version_affected" : "=" }, { "version_value" : "6.2.7.5", "version_affected" : "=" }, { "version_value" : "6.2.7.6", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.0.1", "version_affected" : "=" } ] } }, { "product_name" : "ironport_postx", "version" : { "version_data" : [ { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38525", "name" : "38525", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "name" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml", "name" : "20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the WebSafe DistributorServlet in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to read arbitrary files via unknown vectors, aka IronPort Bug 65922." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-11T17:30Z", "lastModifiedDate" : "2010-02-26T07:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0145", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "ironport_encryption_appliance", "version" : { "version_data" : [ { "version_value" : "6.2.4", "version_affected" : "=" }, { "version_value" : "6.2.4.1", "version_affected" : "=" }, { "version_value" : "6.2.5", "version_affected" : "=" }, { "version_value" : "6.2.6", "version_affected" : "=" }, { "version_value" : "6.2.7", "version_affected" : "=" }, { "version_value" : "6.2.7.1", "version_affected" : "=" }, { "version_value" : "6.2.7.2", "version_affected" : "=" }, { "version_value" : "6.2.7.3", "version_affected" : "=" }, { "version_value" : "6.2.7.4", "version_affected" : "=" }, { "version_value" : "6.2.7.5", "version_affected" : "=" }, { "version_value" : "6.2.7.6", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.0.1", "version_affected" : "=" } ] } }, { "product_name" : "ironport_postx", "version" : { "version_data" : [ { "version_value" : "6.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2", "version_affected" : "=" }, { "version_value" : "6.2.2.1", "version_affected" : "=" }, { "version_value" : "6.2.2.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38525", "name" : "38525", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "name" : "http://www.cisco.com/en/US/products/products_applied_mitigation_bulletin09186a0080b17904.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b17903.shtml", "name" : "20100210 Multiple Vulnerabilities in Cisco IronPort Encryption Appliance", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the embedded HTTPS server on the Cisco IronPort Encryption Appliance 6.2.x before 6.2.9.1 and 6.5.x before 6.5.2, and the IronPort PostX MAP before 6.2.9.1, allows remote attackers to execute arbitrary code via unknown vectors, aka IronPort Bug 65923." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.2.7.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_encryption_appliance:6.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:ironport_postx:6.2.2.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-11T17:30Z", "lastModifiedDate" : "2010-02-26T07:10Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0146", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "security_agent", "version" : { "version_data" : [ { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62443", "name" : "62443", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38619", "name" : "38619", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco Security Agent", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38271", "name" : "38271", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023606", "name" : "1023606", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0416", "name" : "ADV-2010-0416", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56345", "name" : "cisco-sa-mgmtcenter-dir-traversal(56345)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Management Center for Cisco Security Agents 6.0 allows remote authenticated users to read arbitrary files via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:security_agent:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-23T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0147", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "security_agent", "version" : { "version_data" : [ { "version_value" : "5.1", "version_affected" : "=" }, { "version_value" : "5.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62444", "name" : "62444", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38619", "name" : "38619", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco Security Agent", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38272", "name" : "38272", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023606", "name" : "1023606", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0416", "name" : "ADV-2010-0416", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56346", "name" : "cisco-sa-mgmtcenter-sql-injection(56346)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Management Center for Cisco Security Agents 5.1 before 5.1.0.117, 5.2 before 5.2.0.296, and 6.0 before 6.0.1.132 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:security_agent:5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:security_agent:5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:security_agent:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-23T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0148", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "security_agent", "version" : { "version_data" : [ { "version_value" : "5.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62445", "name" : "62445", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38619", "name" : "38619", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco Security Agent", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38273", "name" : "38273", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023607", "name" : "1023607", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0416", "name" : "ADV-2010-0416", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56347", "name" : "cisco-securityagent-tcp-dos(56347)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Cisco Security Agent 5.2 before 5.2.0.285, when running on Linux, allows remote attackers to cause a denial of service (kernel panic) via \"a series of TCP packets.\"" }, { "lang" : "en", "value" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910d.shtml\r\n\r\nOnly Cisco Security Agent release 5.2 for Linux, either managed or standalone, are affected by the DoS vulnerability (the Windows version is not affected).\r\n\r\nThe Linux version of standalone agents are installed in the following products:\r\n\r\n * Cisco Unified Communications Manager (CallManager)\r\n * IPCC Express\r\n * IP Interactive Voice Response (IP IVR)\r\n * Cisco Unified Meeting Place\r\n * Cisco Personal Assistant (PA)\r\n * Cisco Unity Connection\r\n\r\nNote: The Sun Solaris version of the Cisco Security Agent is not affected by these vulnerabilities. Only Cisco Security Agent release 5.2 for Linux, either managed or standalone, are affected by the DoS vulnerability. \"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:security_agent:5.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-23T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0149", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "asa_5500", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" } ] } }, { "product_name" : "pix_500", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62433", "name" : "62433", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38618", "name" : "38618", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38636", "name" : "38636", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38275", "name" : "38275", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023612", "name" : "1023612", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0415", "name" : "ADV-2010-0415", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56336", "name" : "cisco-asa-tcp-dos(56336)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.2 before 7.2(4.46), 8.0 before 8.0(4.38), 8.1 before 8.1(2.29), and 8.2 before 8.2(1.5); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (prevention of new connections) via crafted TCP segments during termination of the TCP connection that cause the connection to remain in CLOSEWAIT status, aka \"TCP Connection Exhaustion Denial of Service Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-19T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0150", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "asa_5500", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" } ] } }, { "product_name" : "pix_500", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62434", "name" : "62434", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38618", "name" : "38618", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38636", "name" : "38636", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances", "refsource" : "CISCO", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38277", "name" : "38277", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023612", "name" : "1023612", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0415", "name" : "ADV-2010-0415", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56338", "name" : "cisco-asa5500-sip-dos(56338)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Cisco ASA 5500 Series Adaptive Security Appliance 7.0 before 7.0(8.10), 7.2 before 7.2(4.45), 8.0 before 8.0(5.2), 8.1 before 8.1(2.37), and 8.2 before 8.2(1.16); and Cisco PIX 500 Series Security Appliance; allows remote attackers to cause a denial of service (device reload) via malformed SIP messages, aka Bug ID CSCsy91157." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:pix_500:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-19T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0151", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "firewall_services_module", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0(4)", "version_affected" : "=" }, { "version_value" : "4.0(6)", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62432", "name" : "62432", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38621", "name" : "38621", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910c.shtml", "name" : "20100217 Multiple Vulnerabilities in Cisco ASA 5500 Series Adaptive Security Appliances", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtml", "name" : "20100217 Cisco Firewall Services Module Skinny Client Control Protocol Inspection Denial of Service Vulnerability", "refsource" : "CISCO", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38274", "name" : "38274", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023609", "name" : "1023609", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0418", "name" : "ADV-2010-0418", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56333", "name" : "cisco-fwsm-asa-sccp-dos(56333)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Cisco Firewall Services Module (FWSM) 4.0 before 4.0(8), as used in for the Cisco Catalyst 6500 switches, Cisco 7600 routers, and ASA 5500 Adaptive Security Appliances, allows remote attackers to cause a denial of service (crash) via a malformed Skinny Client Control Protocol (SCCP) message." }, { "lang" : "en", "value" : "Per: http://www.cisco.com/en/US/products/products_security_advisory09186a0080b1910e.shtml\r\n\r\n\"All non-fixed 4.x versions of Cisco FWSM Software are affected by this vulnerability if SCCP inspection is enabled. SCCP inspection is enabled by default.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:firewall_services_module:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:firewall_services_module:4.0\\(4\\):*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:cisco:firewall_services_module:4.0\\(6\\):*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5500_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5505_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5510_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5520_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5540_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5550_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:5580_series_adaptive_security_appliance:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:catalyst_6500:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:catalyst_7600:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-19T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0152", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "proventia_network_mail_security_system_virtual_appliance", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "proventia_network_mail_security_system_virtual_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/513629/100/0/threaded", "name" : "20100912 MVSA-10-007 / CVE-2010-0152 - IBM Proventia Mail Security System - Multiple persistent and reflected XSS vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ventuneac.net/security-advisories/MVSA-10-007", "name" : "http://www.ventuneac.net/security-advisories/MVSA-10-007", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via (1) the date1 parameter to pvm_messagestore.php, (2) the userfilter parameter to pvm_user_management.php, (3) the ping parameter to sys_tools.php in a sys_ping.php action, (4) the action parameter to pvm_cert_commaction.php, (5) the action parameter to pvm_cert_serveraction.php, (6) the action parameter to pvm_smtpstore.php, (7) the l parameter to sla/index.php, or (8) unspecified stored data; and allow remote authenticated users to inject arbitrary web script or HTML via (9) saved search filters." }, { "lang" : "en", "value" : "Per: http://www.ventuneac.net/security-advisories/MVSA-10-007\r\n\r\nAffected Versions\r\n\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 1.6)\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 2.5)" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:2.5:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-09-14T17:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0153", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "proventia_network_mail_security_system_virtual_appliance", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "proventia_network_mail_security_system_virtual_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/513627/100/0/threaded", "name" : "20100912 MVSA-10-006 / CVE-2010-0153 - IBM Proventia Network Mail Security System - Cross-Site Request Forgery vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ventuneac.net/security-advisories/MVSA-10-006", "name" : "http://www.ventuneac.net/security-advisories/MVSA-10-006", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5.0.2 allow remote attackers to hijack the authentication of administrators for requests that (1) change settings or (2) conduct denial of service attacks." }, { "lang" : "en", "value" : "Per:\r\n\r\nAffected Versions\r\n\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 1.6)\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 2.5)" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:2.5:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : true } }, "publishedDate" : "2010-09-14T17:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0154", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "proventia_network_mail_security_system_virtual_appliance", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "proventia_network_mail_security_system_virtual_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/513637/100/0/threaded", "name" : "20100912 MVSA-10-008 / CVE-2010-0154 - IBM Proventia Mail Security System - Insecure Direct Object Reference vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ventuneac.net/security-advisories/MVSA-10-008", "name" : "http://www.ventuneac.net/security-advisories/MVSA-10-008", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in sla/index.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the l parameter, related to an \"Insecure Direct Object Reference vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.ventuneac.net/security-advisories/MVSA-10-008\r\n\r\nAffected Versions\r\n\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 1.6)" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-09-14T17:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0155", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "proventia_network_mail_security_system_virtual_appliance", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "proventia_network_mail_security_system_virtual_appliance_firmware", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/513636/100/0/threaded", "name" : "20100912 MVSA-10-009 / CVE-2010-0155 - IBM Proventia Network Mail Security System - CRLF Injection vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ventuneac.net/security-advisories/MVSA-10-009", "name" : "http://www.ventuneac.net/security-advisories/MVSA-10-009", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "CRLF injection vulnerability in load.php in the Local Management Interface (LMI) on the IBM Proventia Network Mail Security System (PNMSS) appliance with firmware before 2.5 allows remote authenticated users to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the javaVersion parameter." }, { "lang" : "en", "value" : "Per: http://www.ventuneac.net/security-advisories/MVSA-10-009\r\n\r\nAffected Versions\r\n\r\nIBM Proventia Network Mail Security System - virtual appliance (firmware 1.6)" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:proventia_network_mail_security_system_virtual_appliance_firmware:1.6:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-09-14T17:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0156", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "puppet", "product" : { "product_data" : [ { "product_name" : "puppet", "version" : { "version_data" : [ { "version_value" : "0.24.3", "version_affected" : "=" }, { "version_value" : "0.24.4", "version_affected" : "=" }, { "version_value" : "0.24.5", "version_affected" : "=" }, { "version_value" : "0.24.6", "version_affected" : "=" }, { "version_value" : "0.24.7", "version_affected" : "=" }, { "version_value" : "0.24.8", "version_affected" : "=" }, { "version_value" : "0.25.0", "version_affected" : "=" }, { "version_value" : "0.25.1", "version_affected" : "=" }, { "version_value" : "0.25.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://groups.google.com/group/puppet-announce/browse_thread/thread/4401823f6cbf6087", "name" : "[puppet-announce] 20100105 ANNOUNCE: Puppet 0.25.2 \"Zoe\" now available!", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://groups.google.com/group/puppet-announce/browse_thread/thread/73cd1b2896d986c2", "name" : "[puppet-announce] 20100108 ANNOUNCE: Puppet 0.24.9 is available", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036083.html", "name" : "FEDORA-2010-1079", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036166.html", "name" : "FEDORA-2010-1372", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38766", "name" : "38766", "refsource" : "SECUNIA", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=502881", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=502881", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://puppet.com/security/cve/cve-2010-0156", "name" : "https://puppet.com/security/cve/cve-2010-0156", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Puppet 0.24.x before 0.24.9 and 0.25.x before 0.25.2 allows local users to overwrite arbitrary files via a symlink attack on the (1) /tmp/daemonout, (2) /tmp/puppetdoc.txt, (3) /tmp/puppetdoc.tex, or (4) /tmp/puppetdoc.aux temporary file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.6:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.24.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:puppet:puppet:0.25.2:rc3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-03T19:30Z", "lastModifiedDate" : "2017-12-09T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0157", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "joomlabiblestudy", "product" : { "product_data" : [ { "product_name" : "com_biblestudy", "version" : { "version_data" : [ { "version_value" : "6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlabiblestudy-lfi.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/37896", "name" : "37896", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37583", "name" : "37583", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Bible Study (com_biblestudy) component 6.1 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter in a studieslist action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joomlabiblestudy:com_biblestudy:6.1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-06T22:00Z", "lastModifiedDate" : "2010-01-07T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0158", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "joomlabamboo", "product" : { "product_data" : [ { "product_name" : "jb_simpla", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlabamboo-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.attrition.org/pipermail/vim/2010-February/002319.html", "name" : "[VIM] 20100203 disputed: CVE-2010-0158 JoomlaBamboo (JB) Simpla Admin SQL injection", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.attrition.org/pipermail/vim/2010-February/002320.html", "name" : "[VIM] 20100203 Re: disputed: CVE-2010-0158 JoomlaBamboo (JB) Simpla Admin SQL injection", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/10971", "name" : "10971", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37579", "name" : "37579", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0014", "name" : "ADV-2010-0014", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** DISPUTED ** SQL injection vulnerability in the JoomlaBamboo (JB) Simpla Admin template for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in an article action to the com_content component, reachable through index.php. NOTE: the vendor disputes this report, saying: \"JoomlaBamboo has investigated this report, and it is incorrect. There is no SQL injection vulnerability involving the id parameter in an article view, and there never was. JoomlaBamboo customers have no reason to be concerned about this report.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joomlabamboo:jb_simpla:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-06T22:00Z", "lastModifiedDate" : "2010-02-05T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0159", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "2.0.0.24", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "9.04", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html", "name" : "FEDORA-2010-1932", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html", "name" : "FEDORA-2010-1936", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html", "name" : "FEDORA-2010-1727", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036097.html", "name" : "FEDORA-2010-3230", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036132.html", "name" : "FEDORA-2010-3267", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html", "name" : "SUSE-SA:2010:015", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/37242", "name" : "37242", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38770", "name" : "38770", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38772", "name" : "38772", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38847", "name" : "38847", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1999", "name" : "DSA-1999", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042", "name" : "MDVSA-2010:042", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-01.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0112.html", "name" : "RHSA-2010:0112", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0113.html", "name" : "RHSA-2010:0113", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0153.html", "name" : "RHSA-2010:0153", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0154.html", "name" : "RHSA-2010:0154", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-895-1", "name" : "USN-895-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.ubuntu.com/usn/USN-896-1", "name" : "USN-896-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0405", "name" : "ADV-2010-0405", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0650", "name" : "ADV-2010-0650", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467005", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=467005", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501934", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=501934", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=527567", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=527567", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=528134", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=528134", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=528300", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=528300", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=530880", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=530880", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534082", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534082", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56359", "name" : "mozilla-browsereng-code-execution(56359)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8485", "name" : "oval:org.mitre.oval:def:8485", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9590", "name" : "oval:org.mitre.oval:def:9590", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the nsBlockFrame::StealFrame function in layout/generic/nsBlockFrame.cpp, and unspecified other vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.0", "versionEndExcluding" : "3.0.18" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionStartIncluding" : "3.5", "versionEndExcluding" : "3.5.8" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2018-11-16T15:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0160", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "<=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html", "name" : "FEDORA-2010-1932", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html", "name" : "FEDORA-2010-1936", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html", "name" : "FEDORA-2010-1727", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html", "name" : "SUSE-SA:2010:015", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/37242", "name" : "37242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38847", "name" : "38847", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1999", "name" : "DSA-1999", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042", "name" : "MDVSA-2010:042", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-02.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0112.html", "name" : "RHSA-2010:0112", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510533/100/0/threaded", "name" : "20100402 ZDI-10-046: Mozilla Firefox Web Worker Array Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-895-1", "name" : "USN-895-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-896-1", "name" : "USN-896-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0405", "name" : "ADV-2010-0405", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-046", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-046", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=531222", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=531222", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=533000", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=533000", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534051", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534051", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56360", "name" : "mozilla-webworkers-code-execution(56360)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11166", "name" : "oval:org.mitre.oval:def:11166", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8465", "name" : "oval:org.mitre.oval:def:8465", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.17" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0161", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39001", "name" : "39001", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38831", "name" : "38831", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0648", "name" : "ADV-2010-0648", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511806", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=511806", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56992", "name" : "thunderbird-activedirectory-dos(56992)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14159", "name" : "oval:org.mitre.oval:def:14159", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 on Windows Vista, Windows Server 2008 R2, and Windows 7 allows remote SMTP, IMAP, and POP servers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via crafted data in a session that uses SSPI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.0.23" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.18" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-23T00:53Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0162", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035346.html", "name" : "FEDORA-2010-1932", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035367.html", "name" : "FEDORA-2010-1936", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035426.html", "name" : "FEDORA-2010-1727", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00001.html", "name" : "SUSE-SA:2010:015", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/37242", "name" : "37242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38847", "name" : "38847", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1999", "name" : "DSA-1999", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:042", "name" : "MDVSA-2010:042", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-05.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-05.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0112.html", "name" : "RHSA-2010:0112", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-895-1", "name" : "USN-895-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-896-1", "name" : "USN-896-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0405", "name" : "ADV-2010-0405", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=455472", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=455472", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56363", "name" : "mozilla-svg-xss(56363)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10697", "name" : "oval:org.mitre.oval:def:10697", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8631", "name" : "oval:org.mitre.oval:def:8631", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via an embedded SVG document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0163", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38977", "name" : "38977", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39001", "name" : "39001", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-07.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0499.html", "name" : "RHSA-2010:0499", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38831", "name" : "38831", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-915-1", "name" : "USN-915-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0648", "name" : "ADV-2010-0648", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1556", "name" : "ADV-2010-1556", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505221", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=505221", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56993", "name" : "thunderbird-messages-dos(56993)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10805", "name" : "oval:org.mitre.oval:def:10805", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14259", "name" : "oval:org.mitre.oval:def:14259", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted message, related to message indexing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.0.23" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.18" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-23T00:53Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0164", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-09.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-09.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510535/100/0/threaded", "name" : "20100402 ZDI-10-047: Mozilla Firefox libpr0n imgContainer Bits-Per-Pixel Change Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38921", "name" : "38921", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-047", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-047", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=547143", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=547143", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8703", "name" : "oval:org.mitre.oval:def:8703", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the imgContainer::InternalAddFrameHelper function in src/imgContainer.cpp in libpr0n in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (heap memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace animation in which the frames have different bits-per-pixel (bpp) values." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0165", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=542849", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=542849", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8472", "name" : "oval:org.mitre.oval:def:8472", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors involving certain indirect calls to the JavaScript eval function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0166", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38943", "name" : "38943", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538065", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538065", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14182", "name" : "oval:org.mitre.oval:def:14182", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when the Core Text API is used, does not properly perform certain deletions, which allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via an HTML document containing invisible Unicode characters, as demonstrated by the U+FEFF, U+FFF9, U+FFFA, and U+FFFB characters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0167", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-11.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38944", "name" : "38944", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534082", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=534082", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=535641", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=535641", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8610", "name" : "oval:org.mitre.oval:def:8610", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9835", "name" : "oval:org.mitre.oval:def:9835", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash) and possibly execute arbitrary code via vectors related to (1) layout/generic/nsBlockFrame.cpp and (2) the _evaluate function in modules/plugin/base/src/nsNPAPIPlugin.cpp." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0168", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-13.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-13.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=540642", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=540642", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8711", "name" : "oval:org.mitre.oval:def:8711", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service (application crash or hang) or hijack the functionality of the browser's add-ons via a crafted SRC attribute of an IMG element, as demonstrated by remote command execution through an ssh: URL in a configuration that supports gnome-vfs with a nonstandard network.gnomevfs.supported-protocols setting." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0169", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-14.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=535806", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=535806", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11391", "name" : "oval:org.mitre.oval:def:11391", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8431", "name" : "oval:org.mitre.oval:def:8431", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to the XUL cache, which might allow remote attackers to modify the browser's font and other CSS attributes, and potentially disrupt rendering of a web page, by forcing the browser to perform this erroneous stylesheet caching." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0170", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-10.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-10.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38919", "name" : "38919", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=541530", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=541530", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8602", "name" : "oval:org.mitre.oval:def:8602", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via vectors that are specific to each affected plugin." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0171", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-12.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=531364", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=531364", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10773", "name" : "oval:org.mitre.oval:def:10773", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7743", "name" : "oval:org.mitre.oval:def:7743", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting (XSS) attacks, by using the addEventListener and setTimeout functions in conjunction with a wrapped object. NOTE: this vulnerability exists because of an incomplete fix for CVE-2007-3736." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0172", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-15.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-15.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/38918", "name" : "38918", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0692", "name" : "ADV-2010-0692", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=537862", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=537862", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8281", "name" : "oval:org.mitre.oval:def:8281", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorization dialog and capture credentials by demanding HTTP authentication in opportunistic circumstances." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-25T21:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0173", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "<=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html", "name" : "FEDORA-2010-5526", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html", "name" : "FEDORA-2010-5539", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39204", "name" : "39204", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39242", "name" : "39242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023775", "name" : "1023775", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023781", "name" : "1023781", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=488850", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=488850", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491722", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=491722", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=496011", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=496011", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499862", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499862", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=542136", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=542136", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57388", "name" : "firefox-browser-eng-code-execution(57388)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7467", "name" : "oval:org.mitre.oval:def:7467", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0174", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "<=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html", "name" : "FEDORA-2010-5526", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html", "name" : "FEDORA-2010-5539", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html", "name" : "FEDORA-2010-5561", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38566", "name" : "38566", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39117", "name" : "39117", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39204", "name" : "39204", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39240", "name" : "39240", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39242", "name" : "39242", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023775", "name" : "1023775", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023781", "name" : "1023781", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-16.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0333.html", "name" : "RHSA-2010:0333", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0765", "name" : "ADV-2010-0765", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0790", "name" : "ADV-2010-0790", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499844", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=499844", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=546530", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=546530", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57389", "name" : "mozilla-browser-eng-code-exec(57389)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7615", "name" : "oval:org.mitre.oval:def:7615", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9502", "name" : "oval:org.mitre.oval:def:9502", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0175", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "<=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html", "name" : "FEDORA-2010-5526", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html", "name" : "FEDORA-2010-5539", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html", "name" : "FEDORA-2010-5561", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38566", "name" : "38566", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39117", "name" : "39117", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39204", "name" : "39204", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39240", "name" : "39240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39242", "name" : "39242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023780", "name" : "1023780", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023782", "name" : "1023782", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-17.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0333.html", "name" : "RHSA-2010:0333", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510542/100/0/threaded", "name" : "20100402 ZDI-10-050: Mozilla Firefox nsTreeSelection EventListener Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0765", "name" : "ADV-2010-0765", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0790", "name" : "ADV-2010-0790", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-050", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-050", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=375928", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=375928", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=540100", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=540100", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57390", "name" : "firefox-nstreeselection-code-execution(57390)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7546", "name" : "oval:org.mitre.oval:def:7546", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9834", "name" : "oval:org.mitre.oval:def:9834", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.17" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0176", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "<=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038367.html", "name" : "FEDORA-2010-5526", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038378.html", "name" : "FEDORA-2010-5539", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038406.html", "name" : "FEDORA-2010-5561", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38566", "name" : "38566", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39117", "name" : "39117", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39204", "name" : "39204", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39240", "name" : "39240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39242", "name" : "39242", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023776", "name" : "1023776", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023782", "name" : "1023782", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-18.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0333.html", "name" : "RHSA-2010:0333", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0765", "name" : "ADV-2010-0765", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0790", "name" : "ADV-2010-0790", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538308", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538308", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57392", "name" : "firefox-nstreecontentview-code-exec(57392)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11052", "name" : "oval:org.mitre.oval:def:11052", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7222", "name" : "oval:org.mitre.oval:def:7222", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a \"dangling pointer vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0177", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "<=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38566", "name" : "38566", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39117", "name" : "39117", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39240", "name" : "39240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023776", "name" : "1023776", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-19.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0333.html", "name" : "RHSA-2010:0333", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510540/100/0/threaded", "name" : "20100402 ZDI-10-049: Mozilla Firefox PluginArray nsMimeType Dangling Pointer Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0765", "name" : "ADV-2010-0765", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-049", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-049", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538310", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=538310", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57393", "name" : "firefox-nspluginarray-code-execution(57393)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10833", "name" : "oval:org.mitre.oval:def:10833", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7622", "name" : "oval:org.mitre.oval:def:7622", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a \"dangling pointer vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.17" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0178", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "<=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39240", "name" : "39240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023776", "name" : "1023776", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-20.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-20.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=546909", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=546909", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57391", "name" : "firefox-draganddrop-code-execution(57391)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10460", "name" : "oval:org.mitre.oval:def:10460", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6975", "name" : "oval:org.mitre.oval:def:6975", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.17" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0179", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "<=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "<=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00002.html", "name" : "SUSE-SA:2011:003", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/3924", "name" : "3924", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39243", "name" : "39243", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39308", "name" : "39308", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/42818", "name" : "42818", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023783", "name" : "1023783", "refsource" : "SECTRACK", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.avaya.com/css/P8/documents/100124650", "name" : "http://support.avaya.com/css/P8/documents/100124650", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2027", "name" : "DSA-2027", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:251", "name" : "MDVSA-2010:251", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-21.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-21.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0332.html", "name" : "RHSA-2010:0332", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39124", "name" : "39124", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0764", "name" : "ADV-2010-0764", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0781", "name" : "ADV-2010-0781", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0030", "name" : "ADV-2011-0030", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504021", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=504021", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57394", "name" : "firefox-firebug-code-execution(57394)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6971", "name" : "oval:org.mitre.oval:def:6971", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9446", "name" : "oval:org.mitre.oval:def:9446", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.17" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0180", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "bugzilla", "version" : { "version_data" : [ { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.6", "version_affected" : "=" }, { "version_value" : "3.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/40300", "name" : "40300", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.bugzilla.org/security/3.2.6/", "name" : "http://www.bugzilla.org/security/3.2.6/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41144", "name" : "41144", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1595", "name" : "ADV-2010-1595", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=561797", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=561797", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Install/Filesystem.pm in Bugzilla 3.5.1 through 3.6 and 3.7, when use_suexec is enabled, uses world-readable permissions for the localconfig files, which allows local users to read sensitive configuration fields, as demonstrated by the database password field and the site_wide_secret field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:bugzilla:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:bugzilla:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:bugzilla:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:bugzilla:3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:bugzilla:3.7:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 1.9 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-28T17:30Z", "lastModifiedDate" : "2010-06-28T17:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0181", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "<=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39136", "name" : "39136", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://websecurity.com.ua/4206/", "name" : "http://websecurity.com.ua/4206/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-23.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-23.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511327/100/0/threaded", "name" : "20100518 DoS vulnerabilities in Firefox, Internet Explorer, Chrome, Opera and other browsers", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452093", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=452093", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57395", "name" : "firefox-mailto-weak-security(57395)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6776", "name" : "oval:org.mitre.oval:def:6776", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service (excessive application launches) via an HTML document with many images." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0182", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.13", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.15", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.20", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "=" }, { "version_value" : "3.0.4", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.0.6", "version_affected" : "=" }, { "version_value" : "3.0.7", "version_affected" : "=" }, { "version_value" : "3.0.8", "version_affected" : "=" }, { "version_value" : "3.0.9", "version_affected" : "=" }, { "version_value" : "3.0.10", "version_affected" : "=" }, { "version_value" : "3.0.11", "version_affected" : "=" }, { "version_value" : "3.0.12", "version_affected" : "=" }, { "version_value" : "3.0.13", "version_affected" : "=" }, { "version_value" : "3.0.14", "version_affected" : "=" }, { "version_value" : "3.0.15", "version_affected" : "=" }, { "version_value" : "3.0.16", "version_affected" : "=" }, { "version_value" : "3.0.17", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "<=" }, { "version_value" : "3.6", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "<=" }, { "version_value" : "2.0.4", "version_affected" : "=" } ] } }, { "product_name" : "thunderbird", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.7.3", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.0.13", "version_affected" : "=" }, { "version_value" : "1.5.0.14", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.12", "version_affected" : "=" }, { "version_value" : "2.0.0.14", "version_affected" : "=" }, { "version_value" : "2.0.0.16", "version_affected" : "=" }, { "version_value" : "2.0.0.17", "version_affected" : "=" }, { "version_value" : "2.0.0.18", "version_affected" : "=" }, { "version_value" : "2.0.0.19", "version_affected" : "=" }, { "version_value" : "2.0.0.21", "version_affected" : "=" }, { "version_value" : "2.0.0.22", "version_affected" : "=" }, { "version_value" : "2.0.0.23", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.0.2", "version_affected" : "=" }, { "version_value" : "3.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39397", "name" : "39397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.avaya.com/css/P8/documents/100091069", "name" : "http://support.avaya.com/css/P8/documents/100091069", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-921-1", "name" : "USN-921-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:070", "name" : "MDVSA-2010:070", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-24.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0500.html", "name" : "RHSA-2010:0500", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0501.html", "name" : "RHSA-2010:0501", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39479", "name" : "39479", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0748", "name" : "ADV-2010-0748", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0849", "name" : "ADV-2010-0849", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1557", "name" : "ADV-2010-1557", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490790", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=490790", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57396", "name" : "firefox-xmldocumentload-weak-security(57396)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7618", "name" : "oval:org.mitre.oval:def:7618", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9375", "name" : "oval:org.mitre.oval:def:9375", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictions via crafted content." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.7" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:2.0.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:3.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-05T17:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0183", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.1", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "=" }, { "version_value" : "3.5.7", "version_affected" : "=" }, { "version_value" : "3.5.9", "version_affected" : "=" } ] } }, { "product_name" : "seamonkey", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043369.html", "name" : "FEDORA-2010-10344", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043405.html", "name" : "FEDORA-2010-10361", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-07/msg00005.html", "name" : "SUSE-SA:2010:030", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40326", "name" : "40326", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40481", "name" : "40481", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mozilla.org/security/announce/2010/mfsa2010-27.html", "name" : "http://www.mozilla.org/security/announce/2010/mfsa2010-27.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/41050", "name" : "41050", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024138", "name" : "1024138", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1551", "name" : "ADV-2010-1551", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1592", "name" : "ADV-2010-1592", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1773", "name" : "ADV-2010-1773", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=557174", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=557174", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12586", "name" : "oval:org.mitre.oval:def:12586", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:seamonkey:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-24T12:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0184", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tibco", "product" : { "product_data" : [ { "product_name" : "runtime_agent", "version" : { "version_data" : [ { "version_value" : "5.4.0", "version_affected" : "=" }, { "version_value" : "5.5.3", "version_affected" : "=" }, { "version_value" : "5.5.4", "version_affected" : "=" }, { "version_value" : "5.6", "version_affected" : "=" }, { "version_value" : "5.6.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38191", "name" : "38191", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37805", "name" : "37805", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.tibco.com/mk/advisory.jsp", "name" : "http://www.tibco.com/mk/advisory.jsp", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt", "name" : "http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0128", "name" : "ADV-2010-0128", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tibco:runtime_agent:5.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tibco:runtime_agent:5.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tibco:runtime_agent:5.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tibco:runtime_agent:5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.6.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0185", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "coldfusion", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kb2.adobe.com/cps/807/cpsid_80719.html", "name" : "http://kb2.adobe.com/cps/807/cpsid_80719.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://osvdb.org/62037", "name" : "62037", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38387", "name" : "38387", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-04.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-04.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38007", "name" : "38007", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023519", "name" : "1023519", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0259", "name" : "ADV-2010-0259", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55997", "name" : "coldfusion-solr-information-disclosure(55997)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of Adobe ColdFusion 9.0 does not restrict access to collections that have been created by the Solr Service, which allows remote attackers to obtain collection metadata, search information, and index data via a request to an unspecified URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:coldfusion:9.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0186", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "<=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "<=" } ] } }, { "product_name" : "adobe_air", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.3.9120", "version_affected" : "<=" } ] } }, { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "6.0.21.0", "version_affected" : "=" }, { "version_value" : "6.0.79", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.25", "version_affected" : "=" }, { "version_value" : "7.0.63", "version_affected" : "=" }, { "version_value" : "7.0.69.0", "version_affected" : "=" }, { "version_value" : "7.0.70.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.22.0", "version_affected" : "=" }, { "version_value" : "8.0.24.0", "version_affected" : "=" }, { "version_value" : "8.0.33.0", "version_affected" : "=" }, { "version_value" : "8.0.34.0", "version_affected" : "=" }, { "version_value" : "8.0.35.0", "version_affected" : "=" }, { "version_value" : "8.0.39.0", "version_affected" : "=" }, { "version_value" : "8.0.42.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.16", "version_affected" : "=" }, { "version_value" : "9.0.18d60", "version_affected" : "=" }, { "version_value" : "9.0.20", "version_affected" : "=" }, { "version_value" : "9.0.20.0", "version_affected" : "=" }, { "version_value" : "9.0.28.0", "version_affected" : "=" }, { "version_value" : "9.0.31", "version_affected" : "=" }, { "version_value" : "9.0.31.0", "version_affected" : "=" }, { "version_value" : "9.0.45.0", "version_affected" : "=" }, { "version_value" : "9.0.47.0", "version_affected" : "=" }, { "version_value" : "9.0.48.0", "version_affected" : "=" }, { "version_value" : "9.0.112.0", "version_affected" : "=" }, { "version_value" : "9.0.114.0", "version_affected" : "=" }, { "version_value" : "9.0.115.0", "version_affected" : "=" }, { "version_value" : "9.0.124.0", "version_affected" : "=" }, { "version_value" : "9.0.125.0", "version_affected" : "=" }, { "version_value" : "9.0.151.0", "version_affected" : "=" }, { "version_value" : "9.0.152.0", "version_affected" : "=" }, { "version_value" : "9.0.159.0", "version_affected" : "=" }, { "version_value" : "9.0.246.0", "version_affected" : "=" }, { "version_value" : "9.0.260.0", "version_affected" : "=" }, { "version_value" : "9.125.0", "version_affected" : "=" }, { "version_value" : "10.0.12.10", "version_affected" : "=" }, { "version_value" : "10.0.12.36", "version_affected" : "=" }, { "version_value" : "10.0.15.3", "version_affected" : "=" }, { "version_value" : "10.0.22.87", "version_affected" : "=" }, { "version_value" : "10.0.32.18", "version_affected" : "=" }, { "version_value" : "10.0.42.34", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38547", "name" : "38547", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38639", "name" : "38639", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43026", "name" : "43026", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201101-09.xml", "name" : "GLSA-201101-09", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023585", "name" : "1023585", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-06.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-06.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-07.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-07.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/62300", "name" : "62300", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0114.html", "name" : "RHSA-2010:0114", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38198", "name" : "38198", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0192", "name" : "ADV-2011-0192", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=563819", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=563819", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8518", "name" : "oval:org.mitre.oval:def:8518", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0102.html", "name" : "RHSA-2010:0102", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0103.html", "name" : "RHSA-2010:0103", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-domain vulnerability in Adobe Flash Player before 10.0.45.2, Adobe AIR before 1.5.3.9130, and Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows remote attackers to bypass intended sandbox restrictions and make cross-domain requests via unspecified vectors." }, { "lang" : "en", "value" : "Per: http://www.adobe.com/support/security/bulletins/apsb10-07.html\r\n\r\n\r\nA critical vulnerability has been identified in Adobe Reader 9.3 for Windows, Macintosh and UNIX, Adobe Acrobat 9.3 for Windows and Macintosh, and Adobe Reader 8.2 and Acrobat 8.2 for Windows and Macintosh. As described in Security Bulletin APSB10-06, this vulnerability (CVE-2010-0186) could subvert the domain sandbox and make unauthorized cross-domain requests.\r\n\r\n\r\n\r\nAffected software versions\r\n\r\nAdobe Reader 9.3 and earlier versions for Windows, Macintosh, and UNIX\r\nAdobe Acrobat 9.3 and earlier versions for Windows and Macintosh" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5.3.9120" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.0.42.34" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:*:*:*:*:*:*:*:*", "versionEndIncluding" : "9.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:*:*:*:*:*:*:*:*", "versionEndIncluding" : "9.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0187", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "adobe_air", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.3.9120", "version_affected" : "<=" } ] } }, { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "6.0.21.0", "version_affected" : "=" }, { "version_value" : "6.0.79", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.25", "version_affected" : "=" }, { "version_value" : "7.0.63", "version_affected" : "=" }, { "version_value" : "7.0.69.0", "version_affected" : "=" }, { "version_value" : "7.0.70.0", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.22.0", "version_affected" : "=" }, { "version_value" : "8.0.24.0", "version_affected" : "=" }, { "version_value" : "8.0.33.0", "version_affected" : "=" }, { "version_value" : "8.0.34.0", "version_affected" : "=" }, { "version_value" : "8.0.35.0", "version_affected" : "=" }, { "version_value" : "8.0.39.0", "version_affected" : "=" }, { "version_value" : "8.0.42.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.16", "version_affected" : "=" }, { "version_value" : "9.0.18d60", "version_affected" : "=" }, { "version_value" : "9.0.20", "version_affected" : "=" }, { "version_value" : "9.0.20.0", "version_affected" : "=" }, { "version_value" : "9.0.28.0", "version_affected" : "=" }, { "version_value" : "9.0.31", "version_affected" : "=" }, { "version_value" : "9.0.31.0", "version_affected" : "=" }, { "version_value" : "9.0.45.0", "version_affected" : "=" }, { "version_value" : "9.0.47.0", "version_affected" : "=" }, { "version_value" : "9.0.48.0", "version_affected" : "=" }, { "version_value" : "9.0.112.0", "version_affected" : "=" }, { "version_value" : "9.0.114.0", "version_affected" : "=" }, { "version_value" : "9.0.115.0", "version_affected" : "=" }, { "version_value" : "9.0.124.0", "version_affected" : "=" }, { "version_value" : "9.0.125.0", "version_affected" : "=" }, { "version_value" : "9.0.151.0", "version_affected" : "=" }, { "version_value" : "9.0.152.0", "version_affected" : "=" }, { "version_value" : "9.0.159.0", "version_affected" : "=" }, { "version_value" : "9.0.246.0", "version_affected" : "=" }, { "version_value" : "9.0.260.0", "version_affected" : "=" }, { "version_value" : "9.125.0", "version_affected" : "=" }, { "version_value" : "10.0.12.10", "version_affected" : "=" }, { "version_value" : "10.0.12.36", "version_affected" : "=" }, { "version_value" : "10.0.15.3", "version_affected" : "=" }, { "version_value" : "10.0.22.87", "version_affected" : "=" }, { "version_value" : "10.0.32.18", "version_affected" : "=" }, { "version_value" : "10.0.42.34", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://sebug.net/exploit/18967/", "name" : "http://sebug.net/exploit/18967/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38547", "name" : "38547", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43026", "name" : "43026", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201101-09.xml", "name" : "GLSA-201101-09", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023585", "name" : "1023585", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-06.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-06.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11182", "name" : "11182", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/38200", "name" : "38200", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0192", "name" : "ADV-2011-0192", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=564287", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=564287", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16125", "name" : "oval:org.mitre.oval:def:16125", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8393", "name" : "oval:org.mitre.oval:def:8393", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0102.html", "name" : "RHSA-2010:0102", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Flash Player before 10.0.45.2 and Adobe AIR before 1.5.3.9130 allow remote attackers to cause a denial of service (application crash) via a modified SWF file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5.3.9120" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.69.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.70.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.24.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.0.42.34" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0188", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38639", "name" : "38639", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023601", "name" : "1023601", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-07.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-07.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0114.html", "name" : "RHSA-2010:0114", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38195", "name" : "38195", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0399", "name" : "ADV-2010-0399", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56297", "name" : "adobe-unspec-priv-escalation(56297)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8697", "name" : "oval:org.mitre.oval:def:8697", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Adobe Reader and Acrobat 8.x before 8.2.1 and 9.x before 9.3.1 allows attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0189", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "download_manager", "version" : { "version_data" : [ { "version_value" : "1.6.2.60", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "nos_microsystems", "product" : { "product_data" : [ { "product_name" : "getplus_download_manager", "version" : { "version_data" : [ { "version_value" : "1.5.2.35", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx", "name" : "http://aviv.raffon.net/2010/02/18/SkeletonsInAdobesSecurityCloset.aspx", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html", "name" : "http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://blogs.zdnet.com/security/?p=5505", "name" : "http://blogs.zdnet.com/security/?p=5505", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=856", "name" : "20100223 Multiple Vendor NOS Microsystems getPlus Downloader Input Validation Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38729", "name" : "38729", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023651", "name" : "1023651", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-08.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-08.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.akitasecurity.nl/advisory.php?id=AK20090401", "name" : "http://www.akitasecurity.nl/advisory.php?id=AK20090401", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62547", "name" : "62547", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38313", "name" : "38313", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0459", "name" : "ADV-2010-0459", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56370", "name" : "adobe-dlmanager-unspecified-file-download(56370)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7182", "name" : "oval:org.mitre.oval:def:7182", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A certain ActiveX control in NOS Microsystems getPlus Download Manager (aka DLM or Downloader) 1.5.2.35, as used in Adobe Download Manager, improperly validates requests involving web sites that are not in subdomains, which allows remote attackers to force the download and installation of arbitrary programs via a crafted name for a download site." }, { "lang" : "en", "value" : "Per: http://blogs.adobe.com/psirt/2010/02/adobe_download_manager_issue.html\r\n\r\n\r\n\r\n\"Adobe is aware of the recently posted report of a remote code execution vulnerability in the Adobe Download Manager.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nos_microsystems:getplus_download_manager:1.5.2.35:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:download_manager:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.6.2.60" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-23T20:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0190", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6986", "name" : "oval:org.mitre.oval:def:6986", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0191", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6729", "name" : "oval:org.mitre.oval:def:6729", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to execute arbitrary code via unspecified vectors, related to a \"prefix protocol handler vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0192", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7046", "name" : "oval:org.mitre.oval:def:7046", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0193 and CVE-2010-0196." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0193", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57701", "name" : "adobe-acrobat-unspec-code-exec(57701)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7352", "name" : "oval:org.mitre.oval:def:7352", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0196." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0194", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6823", "name" : "oval:org.mitre.oval:def:6823", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0197, CVE-2010-0201, and CVE-2010-0204." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0195", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7420", "name" : "oval:org.mitre.oval:def:7420", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, do not properly handle fonts, which allows attackers to execute arbitrary code via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0196", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7064", "name" : "oval:org.mitre.oval:def:7064", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2010-0192 and CVE-2010-0193." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0197", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7298", "name" : "oval:org.mitre.oval:def:7298", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0201, and CVE-2010-0204." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0198", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7106", "name" : "oval:org.mitre.oval:def:7106", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0199, CVE-2010-0202, and CVE-2010-0203." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0199", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6900", "name" : "oval:org.mitre.oval:def:6900", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0202, and CVE-2010-0203." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0200", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2010-1241. Reason: This candidate is a duplicate of CVE-2010-1241. Notes: All CVE users should reference CVE-2010-1241 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2016-12-16T02:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0201", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7056", "name" : "oval:org.mitre.oval:def:7056", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0204." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0202", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6733", "name" : "oval:org.mitre.oval:def:6733", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0203." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0203", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7494", "name" : "oval:org.mitre.oval:def:7494", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0198, CVE-2010-0199, and CVE-2010-0202." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0204", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "acrobat", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.3", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } }, { "product_name" : "acrobat_reader", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.1.1", "version_affected" : "=" }, { "version_value" : "8.1.2", "version_affected" : "=" }, { "version_value" : "8.1.4", "version_affected" : "=" }, { "version_value" : "8.1.5", "version_affected" : "=" }, { "version_value" : "8.1.6", "version_affected" : "=" }, { "version_value" : "8.1.7", "version_affected" : "=" }, { "version_value" : "8.2.1", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-09.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39329", "name" : "39329", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39522", "name" : "39522", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103C.html", "name" : "TA10-103C", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0873", "name" : "ADV-2010-0873", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57711", "name" : "acrobat-unspec-code-execution(57711)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7387", "name" : "oval:org.mitre.oval:def:7387", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Reader and Acrobat 9.x before 9.3.2, and 8.x before 8.2.2 on Windows and Mac OS X, allow attackers to cause a denial of service (memory corruption) or execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2010-0194, CVE-2010-0197, and CVE-2010-0201." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:9.3.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat:8.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:acrobat_reader:8.2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0205", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "libpng", "product" : { "product_data" : [ { "product_name" : "libpng", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.0a", "version_affected" : "=" }, { "version_value" : "1.0.0b", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.1a", "version_affected" : "=" }, { "version_value" : "1.0.1b", "version_affected" : "=" }, { "version_value" : "1.0.1c", "version_affected" : "=" }, { "version_value" : "1.0.1d", "version_affected" : "=" }, { "version_value" : "1.0.1e", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.2a", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.3a", "version_affected" : "=" }, { "version_value" : "1.0.3b", "version_affected" : "=" }, { "version_value" : "1.0.3d", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.4a", "version_affected" : "=" }, { "version_value" : "1.0.4b", "version_affected" : "=" }, { "version_value" : "1.0.4c", "version_affected" : "=" }, { "version_value" : "1.0.4d", "version_affected" : "=" }, { "version_value" : "1.0.4e", "version_affected" : "=" }, { "version_value" : "1.0.4f", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.5a", "version_affected" : "=" }, { "version_value" : "1.0.5b", "version_affected" : "=" }, { "version_value" : "1.0.5c", "version_affected" : "=" }, { "version_value" : "1.0.5d", "version_affected" : "=" }, { "version_value" : "1.0.5e", "version_affected" : "=" }, { "version_value" : "1.0.5f", "version_affected" : "=" }, { "version_value" : "1.0.5g", "version_affected" : "=" }, { "version_value" : "1.0.5h", "version_affected" : "=" }, { "version_value" : "1.0.5i", "version_affected" : "=" }, { "version_value" : "1.0.5j", "version_affected" : "=" }, { "version_value" : "1.0.5k", "version_affected" : "=" }, { "version_value" : "1.0.5l", "version_affected" : "=" }, { "version_value" : "1.0.5m", "version_affected" : "=" }, { "version_value" : "1.0.5n", "version_affected" : "=" }, { "version_value" : "1.0.5o", "version_affected" : "=" }, { "version_value" : "1.0.5p", "version_affected" : "=" }, { "version_value" : "1.0.5q", "version_affected" : "=" }, { "version_value" : "1.0.5r", "version_affected" : "=" }, { "version_value" : "1.0.5s", "version_affected" : "=" }, { "version_value" : "1.0.5t", "version_affected" : "=" }, { "version_value" : "1.0.5u", "version_affected" : "=" }, { "version_value" : "1.0.5v", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.6d", "version_affected" : "=" }, { "version_value" : "1.0.6e", "version_affected" : "=" }, { "version_value" : "1.0.6f", "version_affected" : "=" }, { "version_value" : "1.0.6g", "version_affected" : "=" }, { "version_value" : "1.0.6h", "version_affected" : "=" }, { "version_value" : "1.0.6i", "version_affected" : "=" }, { "version_value" : "1.0.6j", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0.12", "version_affected" : "=" }, { "version_value" : "1.0.13", "version_affected" : "=" }, { "version_value" : "1.0.14", "version_affected" : "=" }, { "version_value" : "1.0.15", "version_affected" : "=" }, { "version_value" : "1.0.16", "version_affected" : "=" }, { "version_value" : "1.0.17", "version_affected" : "=" }, { "version_value" : "1.0.18", "version_affected" : "=" }, { "version_value" : "1.0.19", "version_affected" : "=" }, { "version_value" : "1.0.20", "version_affected" : "=" }, { "version_value" : "1.0.21", "version_affected" : "=" }, { "version_value" : "1.0.22", "version_affected" : "=" }, { "version_value" : "1.0.23", "version_affected" : "=" }, { "version_value" : "1.0.24", "version_affected" : "=" }, { "version_value" : "1.0.25", "version_affected" : "=" }, { "version_value" : "1.0.26", "version_affected" : "=" }, { "version_value" : "1.0.27", "version_affected" : "=" }, { "version_value" : "1.0.28", "version_affected" : "=" }, { "version_value" : "1.0.29", "version_affected" : "=" }, { "version_value" : "1.0.30", "version_affected" : "=" }, { "version_value" : "1.0.31", "version_affected" : "=" }, { "version_value" : "1.0.32", "version_affected" : "=" }, { "version_value" : "1.0.33", "version_affected" : "=" }, { "version_value" : "1.0.34", "version_affected" : "=" }, { "version_value" : "1.0.35", "version_affected" : "=" }, { "version_value" : "1.0.37", "version_affected" : "=" }, { "version_value" : "1.0.38", "version_affected" : "=" }, { "version_value" : "1.0.39", "version_affected" : "=" }, { "version_value" : "1.0.40", "version_affected" : "=" }, { "version_value" : "1.0.41", "version_affected" : "=" }, { "version_value" : "1.0.42", "version_affected" : "=" }, { "version_value" : "1.0.43", "version_affected" : "=" }, { "version_value" : "1.0.44", "version_affected" : "=" }, { "version_value" : "1.0.45", "version_affected" : "=" }, { "version_value" : "1.0.46", "version_affected" : "=" }, { "version_value" : "1.0.47", "version_affected" : "=" }, { "version_value" : "1.0.48", "version_affected" : "=" }, { "version_value" : "1.0.50", "version_affected" : "=" }, { "version_value" : "1.0.51", "version_affected" : "=" }, { "version_value" : "1.0.52", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.12", "version_affected" : "=" }, { "version_value" : "1.2.13", "version_affected" : "=" }, { "version_value" : "1.2.14", "version_affected" : "=" }, { "version_value" : "1.2.15", "version_affected" : "=" }, { "version_value" : "1.2.16", "version_affected" : "=" }, { "version_value" : "1.2.17", "version_affected" : "=" }, { "version_value" : "1.2.18", "version_affected" : "=" }, { "version_value" : "1.2.19", "version_affected" : "=" }, { "version_value" : "1.2.20", "version_affected" : "=" }, { "version_value" : "1.2.21", "version_affected" : "=" }, { "version_value" : "1.2.22", "version_affected" : "=" }, { "version_value" : "1.2.23", "version_affected" : "=" }, { "version_value" : "1.2.24", "version_affected" : "=" }, { "version_value" : "1.2.25", "version_affected" : "=" }, { "version_value" : "1.2.26", "version_affected" : "=" }, { "version_value" : "1.2.27", "version_affected" : "=" }, { "version_value" : "1.2.28", "version_affected" : "=" }, { "version_value" : "1.2.29", "version_affected" : "=" }, { "version_value" : "1.2.30", "version_affected" : "=" }, { "version_value" : "1.2.31", "version_affected" : "=" }, { "version_value" : "1.2.32", "version_affected" : "=" }, { "version_value" : "1.2.33", "version_affected" : "=" }, { "version_value" : "1.2.34", "version_affected" : "=" }, { "version_value" : "1.2.35", "version_affected" : "=" }, { "version_value" : "1.2.36", "version_affected" : "=" }, { "version_value" : "1.2.37", "version_affected" : "=" }, { "version_value" : "1.2.38", "version_affected" : "=" }, { "version_value" : "1.2.39", "version_affected" : "=" }, { "version_value" : "1.2.40", "version_affected" : "=" }, { "version_value" : "1.2.41", "version_affected" : "=" }, { "version_value" : "1.2.42", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "10.0", "version_affected" : "=" }, { "version_value" : "10.0.0", "version_affected" : "=" }, { "version_value" : "10.0.1", "version_affected" : "=" }, { "version_value" : "10.0.2", "version_affected" : "=" }, { "version_value" : "10.0.3", "version_affected" : "=" }, { "version_value" : "10.0.4", "version_affected" : "=" }, { "version_value" : "10.1", "version_affected" : "=" }, { "version_value" : "10.1.0", "version_affected" : "=" }, { "version_value" : "10.1.1", "version_affected" : "=" }, { "version_value" : "10.1.2", "version_affected" : "=" }, { "version_value" : "10.1.3", "version_affected" : "=" }, { "version_value" : "10.1.4", "version_affected" : "=" }, { "version_value" : "10.1.5", "version_affected" : "=" }, { "version_value" : "10.2", "version_affected" : "=" }, { "version_value" : "10.2.0", "version_affected" : "=" }, { "version_value" : "10.2.1", "version_affected" : "=" }, { "version_value" : "10.2.2", "version_affected" : "=" }, { "version_value" : "10.2.3", "version_affected" : "=" }, { "version_value" : "10.2.4", "version_affected" : "=" }, { "version_value" : "10.2.5", "version_affected" : "=" }, { "version_value" : "10.2.6", "version_affected" : "=" }, { "version_value" : "10.2.7", "version_affected" : "=" }, { "version_value" : "10.2.8", "version_affected" : "=" }, { "version_value" : "10.3", "version_affected" : "=" }, { "version_value" : "10.3.0", "version_affected" : "=" }, { "version_value" : "10.3.1", "version_affected" : "=" }, { "version_value" : "10.3.2", "version_affected" : "=" }, { "version_value" : "10.3.3", "version_affected" : "=" }, { "version_value" : "10.3.4", "version_affected" : "=" }, { "version_value" : "10.3.5", "version_affected" : "=" }, { "version_value" : "10.3.6", "version_affected" : "=" }, { "version_value" : "10.3.7", "version_affected" : "=" }, { "version_value" : "10.3.8", "version_affected" : "=" }, { "version_value" : "10.3.9", "version_affected" : "=" }, { "version_value" : "10.4", "version_affected" : "=" }, { "version_value" : "10.4.0", "version_affected" : "=" }, { "version_value" : "10.4.1", "version_affected" : "=" }, { "version_value" : "10.4.2", "version_affected" : "=" }, { "version_value" : "10.4.3", "version_affected" : "=" }, { "version_value" : "10.4.4", "version_affected" : "=" }, { "version_value" : "10.4.5", "version_affected" : "=" }, { "version_value" : "10.4.6", "version_affected" : "=" }, { "version_value" : "10.4.7", "version_affected" : "=" }, { "version_value" : "10.4.8", "version_affected" : "=" }, { "version_value" : "10.4.9", "version_affected" : "=" }, { "version_value" : "10.4.10", "version_affected" : "=" }, { "version_value" : "10.4.11", "version_affected" : "=" }, { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" }, { "version_value" : "10.6.4", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "6.06", "version_affected" : "=" }, { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "9.04", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "11", "version_affected" : "=" }, { "version_value" : "12", "version_affected" : "=" }, { "version_value" : "13", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "11.0", "version_affected" : "=" }, { "version_value" : "11.1", "version_affected" : "=" }, { "version_value" : "11.2", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "linux_enterprise_server", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" }, { "version_value" : "10", "version_affected" : "=" }, { "version_value" : "11", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-400" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://libpng.sourceforge.net/ADVISORY-1.4.1.html", "name" : "http://libpng.sourceforge.net/ADVISORY-1.4.1.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://libpng.sourceforge.net/decompression_bombs.html", "name" : "http://libpng.sourceforge.net/decompression_bombs.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037237.html", "name" : "FEDORA-2010-2988", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037355.html", "name" : "FEDORA-2010-3375", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037364.html", "name" : "FEDORA-2010-3414", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037607.html", "name" : "FEDORA-2010-4683", "refsource" : "FEDORA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html", "name" : "SUSE-SR:2010:011", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html", "name" : "SUSE-SR:2010:012", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ "Mailing List" ] }, { "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000105.html", "name" : "[security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://osvdb.org/62670", "name" : "62670", "refsource" : "OSVDB", "tags" : [ "Broken Link" ] }, { "url" : "http://secunia.com/advisories/38774", "name" : "38774", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39251", "name" : "39251", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/41574", "name" : "41574", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ "Broken Link" ] }, { "url" : "http://ubuntu.com/usn/usn-913-1", "name" : "USN-913-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2032", "name" : "DSA-2032", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/576029", "name" : "VU#576029", "refsource" : "CERT-VN", "tags" : [ "Third Party Advisory", "US Government Resource" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:063", "name" : "MDVSA-2010:063", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:064", "name" : "MDVSA-2010:064", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38478", "name" : "38478", "refsource" : "BID", "tags" : [ "Patch", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securitytracker.com/id?1023674", "name" : "1023674", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0517", "name" : "ADV-2010-0517", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0605", "name" : "ADV-2010-0605", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0626", "name" : "ADV-2010-0626", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0637", "name" : "ADV-2010-0637", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0667", "name" : "ADV-2010-0667", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0682", "name" : "ADV-2010-0682", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0686", "name" : "ADV-2010-0686", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0847", "name" : "ADV-2010-0847", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1107", "name" : "ADV-2010-1107", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2491", "name" : "ADV-2010-2491", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56661", "name" : "libpng-pngdecompresschunk-dos(56661)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The png_decompress_chunk function in pngrutil.c in libpng 1.0.x before 1.0.53, 1.2.x before 1.2.43, and 1.4.x before 1.4.1 does not properly handle compressed ancillary-chunk data that has a disproportionately large uncompressed representation, which allows remote attackers to cause a denial of service (memory and CPU consumption, and application hang) via a crafted PNG file, as demonstrated by use of the deflate compression method on data composed of many occurrences of the same character, related to a \"decompression bomb\" attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.0.0", "versionEndExcluding" : "1.0.53" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.2.0", "versionEndExcluding" : "1.2.43" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libpng:libpng:*:*:*:*:*:*:*:*", "versionStartIncluding" : "1.4.0", "versionEndExcluding" : "1.4.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndExcluding" : "10.6.5" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:linux_enterprise_server:9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:linux_enterprise_server:10:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:linux_enterprise_server:11:-:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:linux_enterprise_server:11:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:-:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-03T19:30Z", "lastModifiedDate" : "2020-08-07T13:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0206", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xpdfreader", "product" : { "product_data" : [ { "product_name" : "xpdf", "version" : { "version_data" : [ { "version_value" : "3.03-17", "version_affected" : "=" }, { "version_value" : "3.04-4", "version_affected" : "=" }, { "version_value" : "3.04-13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-476" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0206", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0206", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2010-0206", "name" : "https://security-tracker.debian.org/tracker/CVE-2010-0206", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "xpdf allows remote attackers to cause a denial of service (NULL pointer dereference and crash) in the way it processes JBIG2 PDF stream objects." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.03-17:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.04-4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.04-13:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-10-30T21:15Z", "lastModifiedDate" : "2019-11-01T18:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0207", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "xpdfreader", "product" : { "product_data" : [ { "product_name" : "xpdf", "version" : { "version_data" : [ { "version_value" : "3.03-17", "version_affected" : "=" }, { "version_value" : "3.04-4", "version_affected" : "=" }, { "version_value" : "3.04-13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-835" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0207", "refsource" : "MISC", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2010-0207", "name" : "https://security-tracker.debian.org/tracker/CVE-2010-0207", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "In xpdf, the xref table contains an infinite loop which allows remote attackers to cause a denial of service (application crash) in xpdf-based PDF viewers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.03-17:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.04-4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:xpdfreader:xpdf:3.04-13:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2019-10-30T21:15Z", "lastModifiedDate" : "2019-11-01T18:59Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0209", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "adobe_air", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.3.9120", "version_affected" : "=" } ] } }, { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.25", "version_affected" : "=" }, { "version_value" : "7.0.63", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0.22.0", "version_affected" : "=" }, { "version_value" : "8.0.33.0", "version_affected" : "=" }, { "version_value" : "8.0.34.0", "version_affected" : "=" }, { "version_value" : "8.0.35.0", "version_affected" : "=" }, { "version_value" : "8.0.39.0", "version_affected" : "=" }, { "version_value" : "8.0.42.0", "version_affected" : "=" }, { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.16", "version_affected" : "=" }, { "version_value" : "9.0.18d60", "version_affected" : "=" }, { "version_value" : "9.0.20", "version_affected" : "=" }, { "version_value" : "9.0.20.0", "version_affected" : "=" }, { "version_value" : "9.0.28", "version_affected" : "=" }, { "version_value" : "9.0.28.0", "version_affected" : "=" }, { "version_value" : "9.0.31", "version_affected" : "=" }, { "version_value" : "9.0.31.0", "version_affected" : "=" }, { "version_value" : "9.0.45.0", "version_affected" : "=" }, { "version_value" : "9.0.47.0", "version_affected" : "=" }, { "version_value" : "9.0.48.0", "version_affected" : "=" }, { "version_value" : "9.0.112.0", "version_affected" : "=" }, { "version_value" : "9.0.114.0", "version_affected" : "=" }, { "version_value" : "9.0.115.0", "version_affected" : "=" }, { "version_value" : "9.0.124.0", "version_affected" : "=" }, { "version_value" : "9.0.125.0", "version_affected" : "=" }, { "version_value" : "9.0.151.0", "version_affected" : "=" }, { "version_value" : "9.0.152.0", "version_affected" : "=" }, { "version_value" : "9.0.159.0", "version_affected" : "=" }, { "version_value" : "9.0.246.0", "version_affected" : "=" }, { "version_value" : "9.0.260.0", "version_affected" : "=" }, { "version_value" : "9.125.0", "version_affected" : "=" }, { "version_value" : "10.0.0.584", "version_affected" : "=" }, { "version_value" : "10.0.12.10", "version_affected" : "=" }, { "version_value" : "10.0.12.36", "version_affected" : "=" }, { "version_value" : "10.0.15.3", "version_affected" : "=" }, { "version_value" : "10.0.22.87", "version_affected" : "=" }, { "version_value" : "10.0.32.18", "version_affected" : "=" }, { "version_value" : "10.0.42.34", "version_affected" : "=" }, { "version_value" : "10.0.45.2", "version_affected" : "=" }, { "version_value" : "10.1.52.14.1", "version_affected" : "=" }, { "version_value" : "10.1.52.15", "version_affected" : "=" }, { "version_value" : "10.1.53.64", "version_affected" : "<=" } ] } }, { "product_name" : "flash_player_for_linux", "version" : { "version_data" : [ { "version_value" : "9.0.31", "version_affected" : "=" }, { "version_value" : "9.0.48.0", "version_affected" : "=" }, { "version_value" : "9.0.115.0", "version_affected" : "=" }, { "version_value" : "9.0.124.0", "version_affected" : "=" }, { "version_value" : "9.0.151.0", "version_affected" : "=" }, { "version_value" : "10.0.12.36", "version_affected" : "=" }, { "version_value" : "10.0.15.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=128767780602751&w=2", "name" : "SSRT100300", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43026", "name" : "43026", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201101-09.xml", "name" : "GLSA-201101-09", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.adobe.com/support/security/bulletins/apsb10-16.html", "name" : "http://www.adobe.com/support/security/bulletins/apsb10-16.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024621", "name" : "1024621", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0192", "name" : "ADV-2011-0192", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11461", "name" : "oval:org.mitre.oval:def:11461", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16106", "name" : "oval:org.mitre.oval:def:16106", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Adobe Flash Player before 9.0.280 and 10.x before 10.1.82.76, and Adobe AIR before 2.0.3, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2010-2213, CVE-2010-2214, and CVE-2010-2216." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:adobe_air:1.5.3.9120:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.0.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.22.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.33.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.34.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.35.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.39.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:8.0.42.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.18d60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.20.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.31.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.45.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.47.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.48.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.112.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.114.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.115.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.124.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.151.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.152.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.159.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.246.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.0.260.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:9.125.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.0.584:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.12.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.22.87:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.32.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.42.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.0.45.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.1.52.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:10.1.52.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.1.53.64" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:9.0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:9.0.48.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:9.0.115.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:9.0.124.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:9.0.151.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:10.0.12.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player_for_linux:10.0.15.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-08-11T18:47Z", "lastModifiedDate" : "2018-10-30T16:26Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0211", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openldap", "product" : { "product_data" : [ { "product_name" : "openldap", "version" : { "version_data" : [ { "version_value" : "2.4.22", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html", "name" : "SUSE-SR:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40639", "name" : "40639", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40677", "name" : "40677", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40687", "name" : "40687", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/42787", "name" : "42787", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-36.xml", "name" : "GLSA-201406-36", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570", "name" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0542.html", "name" : "RHSA-2010:0542", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0543.html", "name" : "RHSA-2010:0543", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/515545/100/0/threaded", "name" : "20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/41770", "name" : "41770", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1024221", "name" : "1024221", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0001.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0001.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1849", "name" : "ADV-2010-1849", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1858", "name" : "ADV-2010-1858", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0025", "name" : "ADV-2011-0025", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The slap_modrdn2mods function in modrdn.c in OpenLDAP 2.4.22 does not check the return value of a call to the smr_normalize function, which allows remote attackers to cause a denial of service (segmentation fault) and possibly execute arbitrary code via a modrdn call with an RDN string containing invalid UTF-8 sequences, which triggers a free of an invalid, uninitialized pointer in the slap_mods_free function, as demonstrated using the Codenomicon LDAPv3 test suite." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-07-28T12:48Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0212", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openldap", "product" : { "product_data" : [ { "product_name" : "openldap", "version" : { "version_data" : [ { "version_value" : "2.4.22", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10735", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html", "name" : "SUSE-SR:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40639", "name" : "40639", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40687", "name" : "40687", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/42787", "name" : "42787", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201406-36.xml", "name" : "GLSA-201406-36", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570", "name" : "http://www.openldap.org/its/index.cgi/Software%20Bugs?id=6570", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0542.html", "name" : "RHSA-2010:0542", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/515545/100/0/threaded", "name" : "20110105 VMSA-2011-0001 VMware ESX third party updates for Service Console packages glibc, sudo, and openldap", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/41770", "name" : "41770", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1024221", "name" : "1024221", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0001.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0001.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1849", "name" : "ADV-2010-1849", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1858", "name" : "ADV-2010-1858", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0025", "name" : "ADV-2011-0025", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenLDAP 2.4.22 allows remote attackers to cause a denial of service (crash) via a modrdn call with a zero-length RDN destination string, which is not properly handled by the smr_normalize function and triggers a NULL pointer dereference in the IA5StringNormalize function in schema_init.c, as demonstrated using the Codenomicon LDAPv3 test suite." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-07-28T12:48Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0213", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-19" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044445.html", "name" : "FEDORA-2010-11344", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-11/msg00001.html", "name" : "SUSE-SR:2010:020", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40652", "name" : "40652", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40709", "name" : "40709", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.isc.org/software/bind/advisories/cve-2010-0213", "name" : "http://www.isc.org/software/bind/advisories/cve-2010-0213", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.kb.cert.org/vuls/id/211905", "name" : "VU#211905", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/41730", "name" : "41730", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024217", "name" : "1024217", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1884", "name" : "ADV-2010-1884", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "BIND 9.7.1 and 9.7.1-P1, when a recursive validating server has a trust anchor that is configured statically or via DNSSEC Lookaside Validation (DLV), allows remote attackers to cause a denial of service (infinite loop) via a query for an RRSIG record whose answer is not in the cache, which causes BIND to repeatedly send RRSIG queries to the authoritative servers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.1:p1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-07-28T12:48Z", "lastModifiedDate" : "2016-04-04T15:50Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0214", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "polyvision", "product" : { "product_data" : [ { "product_name" : "roomwizard_firmware", "version" : { "version_data" : [ { "version_value" : "3.2.3", "version_affected" : "=" } ] } }, { "product_name" : "roomwizard", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt", "name" : "http://packetstormsecurity.org/files/view/97291/roomwizard-disclose.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://seclists.org/fulldisclosure/2011/Jan/58", "name" : "20110106 RoomWizard Default Password and Sync Connector Credential Leak [CVE-2010-0214]", "refsource" : "FULLDISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.kb.cert.org/vuls/id/870601", "name" : "VU#870601", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.securityfocus.com/bid/45699", "name" : "45699", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0059", "name" : "ADV-2011-0059", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/64543", "name" : "roomwizard-password-security-bypass(64543)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The administrative interface on the PolyVision RoomWizard with firmware 3.2.3 places the Sync Connector Active Directory (AD) credentials in a web form that is accessed over HTTP on port 80, which allows remote attackers to obtain sensitive information by reading the HTML source code corresponding to the /admin/sign/DeviceSynch URI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:polyvision:roomwizard_firmware:3.2.3:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:polyvision:roomwizard:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2011-01-12T01:00Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0215", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "a51dev", "product" : { "product_data" : [ { "product_name" : "activecollab", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.activecollab.com/docs/manuals/admin/release-notes/activecollab-2-3-2", "name" : "http://www.activecollab.com/docs/manuals/admin/release-notes/activecollab-2-3-2", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/236703", "name" : "VU#236703", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ActiveCollab before 2.3.2 allows remote authenticated users to bypass intended access restrictions, and (1) delete an attachment or (2) subscribe to an object, via a crafted URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a51dev:activecollab:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2011-01-07T23:00Z", "lastModifiedDate" : "2011-01-11T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0216", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "inventivetec", "product" : { "product_data" : [ { "product_name" : "mediacast", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/44182", "name" : "44182", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securityreason.com/securityalert/8245", "name" : "8245", "refsource" : "SREASON", "tags" : [ ] }, { "url" : "http://www.osvdb.org/72079", "name" : "72079", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt", "name" : "http://www.packetninjas.net/storage/advisories/MediaCast-PWDump-FINAL.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/47572", "name" : "47572", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/67082", "name" : "mediacast-authenticateadsetup-info-disc(67082)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "authenticate_ad_setup_finished.cfm in MediaCAST 8 and earlier allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:inventivetec:mediacast:*:*:*:*:*:*:*:*", "versionEndIncluding" : "8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2011-05-10T19:55Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0217", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeacom", "product" : { "product_data" : [ { "product_name" : "chat_server", "version" : { "version_data" : [ { "version_value" : "5.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securityreason.com/securityalert/8255", "name" : "8255", "refsource" : "SREASON", "tags" : [ ] }, { "url" : "http://www.packetninjas.net/storage/advisories/Zeacom-CVE-2010-0217.txt", "name" : "http://www.packetninjas.net/storage/advisories/Zeacom-CVE-2010-0217.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/518037/100/0/threaded", "name" : "20110517 CVE-2010-0217 - Zeacom Chat Server JSESSIONID weak SessionID Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/47910", "name" : "47910", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/67540", "name" : "chat-server-jsessionid-session-hijacking(67540)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zeacom Chat Server before 5.1 uses too short a random string for the JSESSIONID value, which makes it easier for remote attackers to hijack sessions or cause a denial of service (Chat Server crash or Tomcat daemon crash) via a brute-force attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeacom:chat_server:*:sp4:*:*:*:*:*:*", "versionEndIncluding" : "5.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2011-05-20T22:55Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0218", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.7.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html", "name" : "http://ftp.isc.org/isc/bind9/9.7.2-P2/RELEASE-NOTES-BIND-9.7.2-P2.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.kb.cert.org/vuls/id/784855", "name" : "VU#784855", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "https://lists.isc.org/pipermail/bind-announce/2010-September/000655.html", "name" : "[bind-announce] 20100928 Security Advisory Regarding Unexpected ACL Behavior in BIND 9.7.2", "refsource" : "MLIST", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ISC BIND 9.7.2 through 9.7.2-P1 uses an incorrect ACL to restrict the ability of Recursion Desired (RD) queries to access the cache, which allows remote attackers to obtain potentially sensitive information via a DNS query." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.2:p1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-10-05T22:00Z", "lastModifiedDate" : "2016-04-04T15:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0219", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "axis2", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "sap", "product" : { "product_data" : [ { "product_name" : "businessobjects", "version" : { "version_data" : [ { "version_value" : "3.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://retrogod.altervista.org/9sg_ca_d2d.html", "name" : "http://retrogod.altervista.org/9sg_ca_d2d.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41799", "name" : "41799", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/42763", "name" : "42763", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf", "name" : "http://spl0it.org/files/talks/source_barcelona10/Hacking%20SAP%20BusinessObjects.pdf", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/15869", "name" : "15869", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/989719", "name" : "VU#989719", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.osvdb.org/70233", "name" : "70233", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.rapid7.com/security-center/advisories/R7-0037.jsp", "name" : "http://www.rapid7.com/security-center/advisories/R7-0037.jsp", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/514284/100/0/threaded", "name" : "20101014 R7-0037: SAP BusinessObjects Axis2 Default Admin Password", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024929", "name" : "1024929", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2673", "name" : "ADV-2010-2673", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/62523", "name" : "businessobjects-dswsbobje-security-bypass(62523)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://kb.juniper.net/KB27373", "name" : "https://kb.juniper.net/KB27373", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://service.sap.com/sap/support/notes/1432881", "name" : "https://service.sap.com/sap/support/notes/1432881", "refsource" : "MISC", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apache Axis2, as used in dswsbobje.war in SAP BusinessObjects Enterprise XI 3.2, CA ARCserve D2D r15, and other products, has a default password of axis2 for the admin account, which makes it easier for remote attackers to execute arbitrary code by uploading a crafted web service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:axis2:1.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sap:businessobjects:3.2:*:enterprise_xi:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-10-18T17:00Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0220", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mozilla", "product" : { "product_data" : [ { "product_name" : "firefox", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.5", "version_affected" : "=" }, { "version_value" : "0.6", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.8", "version_affected" : "=" }, { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "0.10", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.0.1", "version_affected" : "=" }, { "version_value" : "1.5.0.2", "version_affected" : "=" }, { "version_value" : "1.5.0.3", "version_affected" : "=" }, { "version_value" : "1.5.0.4", "version_affected" : "=" }, { "version_value" : "1.5.0.5", "version_affected" : "=" }, { "version_value" : "1.5.0.6", "version_affected" : "=" }, { "version_value" : "1.5.0.7", "version_affected" : "=" }, { "version_value" : "1.5.0.8", "version_affected" : "=" }, { "version_value" : "1.5.0.9", "version_affected" : "=" }, { "version_value" : "1.5.0.10", "version_affected" : "=" }, { "version_value" : "1.5.0.11", "version_affected" : "=" }, { "version_value" : "1.5.0.12", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "1.5.4", "version_affected" : "=" }, { "version_value" : "1.5.5", "version_affected" : "=" }, { "version_value" : "1.5.6", "version_affected" : "=" }, { "version_value" : "1.5.7", "version_affected" : "=" }, { "version_value" : "1.5.8", "version_affected" : "=" }, { "version_value" : "1.8", "version_affected" : "=" }, { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.0.1", "version_affected" : "=" }, { "version_value" : "2.0.0.2", "version_affected" : "=" }, { "version_value" : "2.0.0.3", "version_affected" : "=" }, { "version_value" : "2.0.0.4", "version_affected" : "=" }, { "version_value" : "2.0.0.5", "version_affected" : "=" }, { "version_value" : "2.0.0.6", "version_affected" : "=" }, { "version_value" : "2.0.0.7", "version_affected" : "=" }, { "version_value" : "2.0.0.8", "version_affected" : "=" }, { "version_value" : "2.0.0.9", "version_affected" : "=" }, { "version_value" : "2.0.0.10", "version_affected" : "=" }, { "version_value" : "2.0.0.11", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.5", "version_affected" : "=" }, { "version_value" : "3.5", "version_affected" : "=" }, { "version_value" : "3.5.2", "version_affected" : "=" }, { "version_value" : "3.5.3", "version_affected" : "=" }, { "version_value" : "3.5.4", "version_affected" : "=" }, { "version_value" : "3.5.5", "version_affected" : "=" }, { "version_value" : "3.5.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20", "name" : "http://hg.mozilla.org/mozilla-central/rev/51396f6c9f20", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://isc.sans.org/diary.html?storyid=7897", "name" : "http://isc.sans.org/diary.html?storyid=7897", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:000", "name" : "MDVSA-2010:000", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mozilla.com/en-US/firefox/3.5.7/releasenotes/", "name" : "http://www.mozilla.com/en-US/firefox/3.5.7/releasenotes/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507114", "name" : "https://bugzilla.mozilla.org/show_bug.cgi?id=507114", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55550", "name" : "firefox-nsobserverlist-dos(55550)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8292", "name" : "oval:org.mitre.oval:def:8292", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a denial of service (application crash) via a crafted web site that triggers memory consumption and an accompanying Low Memory alert dialog, and also triggers attempted removal of an observer from an empty observers array." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9:rc:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0:preview_release:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:2.0.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:3.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.5.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0221", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kingston", "product" : { "product_data" : [ { "product_name" : "datatraveler_blackbox", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_elite", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm", "name" : "http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023410", "name" : "1023410", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kingston.com/driveupdate/", "name" : "http://www.kingston.com/driveupdate/", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0080", "name" : "ADV-2010-0080", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55477", "name" : "kingston-access-control-sec-bypass(55477)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_blackbox:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_elite:*:*:privacy:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_secure:*:*:privacy:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0222", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kingston", "product" : { "product_data" : [ { "product_name" : "datatraveler_blackbox", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_elite", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm", "name" : "http://news.zdnet.co.uk/security/0,1000000189,39963327,00.htm", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kingston.com/driveupdate/", "name" : "http://www.kingston.com/driveupdate/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0080", "name" : "ADV-2010-0080", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_blackbox:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_elite:*:*:privacy:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_secure:*:*:privacy:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0223", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kingston", "product" : { "product_data" : [ { "product_name" : "datatraveler_blackbox", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_elite", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "datatraveler_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.kingston.com/driveupdate/", "name" : "http://www.kingston.com/driveupdate/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_Kingston_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0080", "name" : "ADV-2010-0080", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Kingston DataTraveler BlackBox (DTBB), DataTraveler Secure Privacy Edition (DTSP), and DataTraveler Elite Privacy Edition (DTEP) USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_blackbox:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_elite:*:*:privacy:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:kingston:datatraveler_secure:*:*:privacy:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0224", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sandisk", "product" : { "product_data" : [ { "product_name" : "cruzer_enterprise_usb", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023408", "name" : "1023408", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "name" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37677", "name" : "37677", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0078", "name" : "ADV-2010-0078", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55475", "name" : "sandisk-access-control-sec-bypass(55475)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SanDisk Cruzer Enterprise USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:sandisk:cruzer_enterprise_usb:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0225", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "scandisk", "product" : { "product_data" : [ { "product_name" : "cruzer_enterprise_usb", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "name" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37677", "name" : "37677", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0078", "name" : "ADV-2010-0078", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SanDisk Cruzer Enterprise USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:scandisk:cruzer_enterprise_usb:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0226", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sandisk", "product" : { "product_data" : [ { "product_name" : "cruzer_enterprise_usb", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "name" : "http://www.sandisk.com/business-solutions/enterprise/technical-support/security-bulletin-december-2009", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37677", "name" : "37677", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "name" : "http://www.syss.de/fileadmin/ressources/040_veroeffentlichungen/dokumente/SySS_knackt_SanDisk_USB-Stick.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "name" : "http://www.syss.de/index.php?id=108&tx_ttnews[tt_news]=528&cHash=8d16fa63d9", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0078", "name" : "ADV-2010-0078", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SanDisk Cruzer Enterprise USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:sandisk:cruzer_enterprise_usb:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2018-08-13T21:47Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0227", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "verbatim", "product" : { "product_data" : [ { "product_name" : "corporate_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ "Not Applicable" ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://securitytracker.com/id?1023409", "name" : "1023409", "refsource" : "SECTRACK", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.verbatim.com/security/security-update.cfm", "name" : "http://www.verbatim.com/security/security-update.cfm", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ "Broken Link" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives validate passwords with a program running on the host computer rather than the device hardware, which allows physically proximate attackers to access the cleartext drive contents via a modified program." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:*:*:fips:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2017-11-22T17:16Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0228", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "verbatim", "product" : { "product_data" : [ { "product_name" : "corporate_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.zdnet.com/hardware/?p=6655", "name" : "http://blogs.zdnet.com/hardware/?p=6655", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://it.slashdot.org/story/10/01/05/1734242/", "name" : "http://it.slashdot.org/story/10/01/05/1734242/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "name" : "http://www.h-online.com/security/news/item/NIST-certified-USB-Flash-drives-with-hardware-encryption-cracked-895308.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.verbatim.com/security/security-update.cfm", "name" : "http://www.verbatim.com/security/security-update.cfm", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives use a fixed 256-bit key for obtaining access to the cleartext drive contents, which makes it easier for physically proximate attackers to read or modify data by determining and providing this key." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:fips:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2010-01-08T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0229", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "verbatim", "product" : { "product_data" : [ { "product_name" : "corporate_secure", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.verbatim.com/security/security-update.cfm", "name" : "http://www.verbatim.com/security/security-update.cfm", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "name" : "https://www.ironkey.com/usb-flash-drive-flaw-exposed", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Verbatim Corporate Secure and Corporate Secure FIPS Edition USB flash drives do not prevent password replay attacks, which allows physically proximate attackers to access the cleartext drive contents by providing a key that was captured in a USB data stream at an earlier time." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:verbatim:corporate_secure:*:*:fips:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-07T19:30Z", "lastModifiedDate" : "2010-01-08T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0230", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "suse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "11.2", "version_affected" : "=" } ] } }, { "product_name" : "suse_linux", "version" : { "version_data" : [ { "version_value" : "10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00007.html", "name" : "SUSE-SR:2010:001", "refsource" : "SUSE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00004.html", "name" : "SUSE-SA:2010:011", "refsource" : "SUSE", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SUSE Linux Enterprise 10 SP3 (SLE10-SP3) and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:opensuse:11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:10:sp3:enterprise_desktop:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:suse:suse_linux:10:sp3:enterprise_server:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T21:30Z", "lastModifiedDate" : "2011-04-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0231", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" }, { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-012", "name" : "MS10-012", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7751", "name" : "oval:org.mitre.oval:def:7751", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB implementation in the Server service in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not use a sufficient source of entropy, which allows remote attackers to obtain access to files and other SMB resources via a large number of authentication requests, related to server-generated challenges, certain \"duplicate values,\" and spoofing of an authentication token, aka \"SMB NTLM Authentication Lack of Entropy Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0232", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "sp4", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_nt", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "sp2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "sp1", "version_affected" : "=" }, { "version_value" : "sp2", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "sp3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx", "name" : "http://blogs.technet.com/msrc/archive/2010/01/20/security-advisory-979682-released.aspx", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.immunitysec.com/pipermail/dailydave/2010-January/006000.html", "name" : "[dailydave] 20100119 We hold these axioms to be self evident", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip", "name" : "http://lock.cmpxchg8b.com/c0af0967d904cef2ad4db766a00bc6af/KiTrap0D.zip", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://seclists.org/fulldisclosure/2010/Jan/341", "name" : "20100119 Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38265", "name" : "38265", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023471", "name" : "1023471", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/979682.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/979682.mspx", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509106/100/0/threaded", "name" : "20100119 Microsoft Windows NT #GP Trap Handler Allows Users to Switch Kernel Stack", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37864", "name" : "37864", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0179", "name" : "ADV-2010-0179", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015", "name" : "MS10-015", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55742", "name" : "ms-win-gptrap-privilege-escalation(55742)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8344", "name" : "oval:org.mitre.oval:def:8344", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows NT 3.1 through Windows 7, including Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2, when access to 16-bit applications is enabled on a 32-bit x86 platform, does not properly validate certain BIOS calls, which allows local users to gain privileges by crafting a VDM_TIB data structure in the Thread Environment Block (TEB), and then calling the NtVdmControl function to start the Windows Virtual DOS Machine (aka NTVDM) subsystem, leading to improperly handled exceptions involving the #GP trap handler (nt!KiTrap0D), aka \"Windows Kernel Exception Handler Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_nt:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0233", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "sp4", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "sp2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "sp1", "version_affected" : "=" }, { "version_value" : "sp2", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "sp3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-015", "name" : "MS10-015", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8392", "name" : "oval:org.mitre.oval:def:8392", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Double free vulnerability in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allows local users to gain privileges via a crafted application, aka \"Windows Kernel Double Free Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/slices/2000.html#d\r\n\r\n\"CWE-415 Double Free\" vulnerability" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:sp2:x32:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:sp1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:sp2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0234", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39374", "name" : "39374", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6814", "name" : "oval:org.mitre.oval:def:6814", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 does not properly validate a registry-key argument to an unspecified system call, which allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Kernel Null Pointer Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0235", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7509", "name" : "oval:org.mitre.oval:def:7509", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not perform the expected validation before creating a symbolic link, which allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Kernel Symbolic Link Value Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0236", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7113", "name" : "oval:org.mitre.oval:def:7113", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold does not properly allocate memory for the destination key associated with a symbolic-link registry key, which allows local users to gain privileges via a crafted application, aka \"Windows Kernel Memory Allocation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0237", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7130", "name" : "oval:org.mitre.oval:def:7130", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows local users to gain privileges by creating a symbolic link from an untrusted registry hive to a trusted registry hive, aka \"Windows Kernel Symbolic Link Creation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0238", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" }, { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6793", "name" : "oval:org.mitre.oval:def:6793", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in registry-key validation in the kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Vista Gold allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Kernel Registry Key Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0239", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009", "name" : "MS10-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8478", "name" : "oval:org.mitre.oval:def:8478", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Router Advertisement packets, which allows remote attackers to execute arbitrary code via crafted packets, aka \"ICMPv6 Router Advertisement Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0240", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009", "name" : "MS10-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8400", "name" : "oval:org.mitre.oval:def:8400", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when a custom network driver is used, does not properly handle local fragmentation of Encapsulating Security Payload (ESP) over UDP packets, which allows remote attackers to execute arbitrary code via crafted packets, aka \"Header MDL Fragmentation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0241", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009", "name" : "MS10-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8516", "name" : "oval:org.mitre.oval:def:8516", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2, when IPv6 is enabled, does not properly perform bounds checking on ICMPv6 Route Information packets, which allows remote attackers to execute arbitrary code via crafted packets, aka \"ICMPv6 Route Information Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0242", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-009", "name" : "MS10-009", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8449", "name" : "oval:org.mitre.oval:def:8449", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The TCP/IP implementation in Microsoft Windows Vista Gold, SP1, and SP2 and Server 2008 Gold and SP2 allows remote attackers to cause a denial of service (system hang) via crafted packets with malformed TCP selective acknowledgement (SACK) values, aka \"TCP/IP Selective Acknowledgement Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:gold:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0243", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "xp", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-003", "name" : "MS10-003", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8399", "name" : "oval:org.mitre.oval:def:8399", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in MSO.DLL in Microsoft Office XP SP3 and Office 2004 for Mac allows remote attackers to execute arbitrary code via a crafted Office document, aka \"MSO.DLL Buffer Overflow.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0244", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.00.2462.0000", "version_affected" : "=" }, { "version_value" : "6.00.2479.0006", "version_affected" : "=" }, { "version_value" : "6.0.2600", "version_affected" : "=" }, { "version_value" : "6.00.2600.0000", "version_affected" : "=" }, { "version_value" : "6.0.2800", "version_affected" : "=" }, { "version_value" : "6.0.2800.1106", "version_affected" : "=" }, { "version_value" : "6.00.2800.1106", "version_affected" : "=" }, { "version_value" : "6.0.2900", "version_affected" : "=" }, { "version_value" : "6.0.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.3663.0000", "version_affected" : "=" }, { "version_value" : "6.00.3718.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.1830", "version_affected" : "=" }, { "version_value" : "6.00.3790.3959", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.5730", "version_affected" : "=" }, { "version_value" : "7.0.5730.11", "version_affected" : "=" }, { "version_value" : "7.00.5730.1100", "version_affected" : "=" }, { "version_value" : "7.00.6000.16386", "version_affected" : "=" }, { "version_value" : "7.00.6000.16441", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55774", "name" : "ie-deleted-obj-code-exec(55774)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8186", "name" : "oval:org.mitre.oval:def:8186", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-2530 and CVE-2009-2531." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730:unknown:gold:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.5730.1100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16386:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16441:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2462.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2479.0006:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2600:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2600.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3663.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3718.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.1830:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.3959:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0245", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55775", "name" : "ie-uninitialized-memory-code-exec(55775)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8491", "name" : "oval:org.mitre.oval:def:8491", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0246." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0246", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55776", "name" : "ie-deleted-object-code-exec(55776)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8378", "name" : "oval:org.mitre.oval:def:8378", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability,\" a different vulnerability than CVE-2009-3671, CVE-2009-3674, and CVE-2010-0245." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0247", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.00.2462.0000", "version_affected" : "=" }, { "version_value" : "6.00.2479.0006", "version_affected" : "=" }, { "version_value" : "6.0.2600", "version_affected" : "=" }, { "version_value" : "6.00.2600.0000", "version_affected" : "=" }, { "version_value" : "6.0.2800", "version_affected" : "=" }, { "version_value" : "6.0.2800.1106", "version_affected" : "=" }, { "version_value" : "6.00.2800.1106", "version_affected" : "=" }, { "version_value" : "6.0.2900", "version_affected" : "=" }, { "version_value" : "6.0.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.3663.0000", "version_affected" : "=" }, { "version_value" : "6.00.3718.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.1830", "version_affected" : "=" }, { "version_value" : "6.00.3790.3959", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55777", "name" : "ie-uninitialized-obj-code-exec(55777)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8506", "name" : "oval:org.mitre.oval:def:8506", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2462.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2479.0006:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2600:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2600.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3663.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3718.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.1830:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.3959:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0248", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.00.2462.0000", "version_affected" : "=" }, { "version_value" : "6.00.2479.0006", "version_affected" : "=" }, { "version_value" : "6.0.2600", "version_affected" : "=" }, { "version_value" : "6.00.2600.0000", "version_affected" : "=" }, { "version_value" : "6.0.2800", "version_affected" : "=" }, { "version_value" : "6.0.2800.1106", "version_affected" : "=" }, { "version_value" : "6.00.2800.1106", "version_affected" : "=" }, { "version_value" : "6.0.2900", "version_affected" : "=" }, { "version_value" : "6.0.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.2900.2180", "version_affected" : "=" }, { "version_value" : "6.00.3663.0000", "version_affected" : "=" }, { "version_value" : "6.00.3718.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.0000", "version_affected" : "=" }, { "version_value" : "6.00.3790.1830", "version_affected" : "=" }, { "version_value" : "6.00.3790.3959", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.5730", "version_affected" : "=" }, { "version_value" : "7.0.5730.11", "version_affected" : "=" }, { "version_value" : "7.00.5730.1100", "version_affected" : "=" }, { "version_value" : "7.00.6000.16386", "version_affected" : "=" }, { "version_value" : "7.00.6000.16441", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55778", "name" : "ie-object-memory-code-exec(55778)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8267", "name" : "oval:org.mitre.oval:def:8267", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"HTML Object Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730:unknown:gold:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.0.5730.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.5730.1100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16386:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7.00.6000.16441:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2462.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2479.0006:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2600:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2600.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2800.1106:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.0.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.2900.2180:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3663.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3718.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.0000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.1830:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6.00.3790.3959:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0249", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "internet_explorer", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "name" : "http://blogs.technet.com/msrc/archive/2010/01/14/security-advisory-979352.aspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://news.cnet.com/8301-27080_3-10435232-245.html", "name" : "http://news.cnet.com/8301-27080_3-10435232-245.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://osvdb.org/61697", "name" : "61697", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023462", "name" : "1023462", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.microsoft.com/kb/979352", "name" : "979352", "refsource" : "MSKB", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11167", "name" : "11167", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/492515", "name" : "VU#492515", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/979352.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/979352.mspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37815", "name" : "37815", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-055A.html", "name" : "TA10-055A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0135", "name" : "ADV-2010-0135", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002", "name" : "MS10-002", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55642", "name" : "ie-freed-object-code-execution(55642)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6835", "name" : "oval:org.mitre.oval:def:6835", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 on Windows 2000 SP4; Windows XP SP2 and SP3; Windows Server 2003 SP2; Windows Vista Gold, SP1, and SP2; Windows Server 2008 Gold, SP2, and R2; and Windows 7 allows remote attackers to execute arbitrary code by accessing a pointer associated with a deleted object, related to incorrectly initialized memory and improper handling of objects in memory, as exploited in the wild in December 2009 and January 2010 during Operation Aurora, aka \"HTML Object Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/416.htmlhttp://cwe.mitre.org/data/definitions/416.html\r\n\r\nCWE-416: Use After Free" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:sp4:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:sp3:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T17:30Z", "lastModifiedDate" : "2018-10-30T16:28Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0250", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38511", "name" : "38511", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.avaya.com/css/P8/documents/100074167", "name" : "http://support.avaya.com/css/P8/documents/100074167", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509472/100/0/threaded", "name" : "20100209 ZDI-10-015: Microsoft Windows RLE Video Decompressor Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38112", "name" : "38112", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-015/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-015/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-013", "name" : "MS10-013", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8064", "name" : "oval:org.mitre.oval:def:8064", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in DirectShow in Microsoft DirectX, as used in the AVI Filter on Windows 2000 SP4, Windows XP SP2 and SP3, and Windows Server 2003 SP2, and in Quartz on Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7, allows remote attackers to execute arbitrary code via an AVI file with a crafted length field in an unspecified video stream, which is not properly handled by the RLE video decompressor, aka \"DirectShow Heap Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:-:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0251", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0252", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38503", "name" : "38503", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40059", "name" : "40059", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-040A.html", "name" : "TA10-040A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html", "name" : "TA10-159B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-008", "name" : "MS10-008", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-034", "name" : "MS10-034", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8424", "name" : "oval:org.mitre.oval:def:8424", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Microsoft Data Analyzer ActiveX control (aka the Office Excel ActiveX control for Data Analysis) in max3activex.dll in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote attackers to execute arbitrary code via a crafted web page that corrupts the \"system state,\" aka \"Microsoft Data Analyzer ActiveX Control Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-10T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0253", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0254", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "visio", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028", "name" : "MS10-028", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6819", "name" : "oval:org.mitre.oval:def:6819", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly validate attributes in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Visio Attribute Validation Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-028.mspx\r\n\r\n'Users of Microsoft Office Visio 2002 and later versions of Visio will be prompted with Open, Save, or Cancel before opening a document. This is a mitigating factor because the vulnerability requires more than a single user action to complete the exploit.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0255", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx", "name" : "http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://isc.sans.org/diary.html?n&storyid=8152", "name" : "http://isc.sans.org/diary.html?n&storyid=8152", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://osvdb.org/62156", "name" : "62156", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://support.avaya.com/css/P8/documents/100089747", "name" : "http://support.avaya.com/css/P8/documents/100089747", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag", "name" : "http://www.coresecurity.com/content/internet-explorer-dynamic-object-tag", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/980088.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/980088.mspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509345/100/0/threaded", "name" : "20100203 CORE-2009-0625: Internet Explorer Dynamic OBJECT tag and URLMON sniffing vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38055", "name" : "38055", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38056", "name" : "38056", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html", "name" : "TA10-159B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-035", "name" : "MS10-035", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7145", "name" : "oval:org.mitre.oval:def:7145", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to a file://127.0.0.1 URL, aka the dynamic OBJECT tag vulnerability, as demonstrated by obtaining the data from an index.dat file, a variant of CVE-2009-1140 and related to CVE-2008-1448." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0256", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "visio", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-028", "name" : "MS10-028", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6732", "name" : "oval:org.mitre.oval:def:6732", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 and SP2 does not properly calculate unspecified indexes associated with Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka \"Visio Index Calculation Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-028.mspx\r\n\r\n'Users of Microsoft Office Visio 2002 and later versions of Visio will be prompted with Open, Save, or Cancel before opening a document. This is a mitigating factor because the vulnerability requires more than a single user action to complete the exploit.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2002:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:visio:2007:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0257", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8617", "name" : "oval:org.mitre.oval:def:8617", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Excel 2002 SP3 does not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Microsoft Office Excel Record Memory Corruption Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0258", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=859", "name" : "20100309 Microsoft Excel Sheet Object Type Confusion Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8545", "name" : "oval:org.mitre.oval:def:8545", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Excel 2002 SP3, 2003 SP3, and 2007 SP1 and SP2; Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that causes memory to be interpreted as a different object type than intended, aka \"Microsoft Office Excel Sheet Object Type Confusion Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0259", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0260", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=862", "name" : "20100309 Microsoft Excel MDXTUPLE Record Heap Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7862", "name" : "oval:org.mitre.oval:def:7862", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2; Office Excel Viewer SP1 and SP2; and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which \"a MDXTUPLE record is broken up into several records,\" aka \"Microsoft Office Excel MDXTUPLE Record Heap Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0261", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=861", "name" : "20100309 Microsoft Excel MDXSET Record Heap Overflow Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8479", "name" : "oval:org.mitre.oval:def:8479", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Microsoft Office Excel 2007 SP1 and SP2 and Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted spreadsheet in which \"a MDXSET record is broken up into several records,\" aka \"Microsoft Office Excel MDXSET Record Heap Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0262", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=860", "name" : "20100309 Microsoft Excel FNGROUPNAME Record Uninitialized Memory Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8562", "name" : "oval:org.mitre.oval:def:8562", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Excel 2007 SP1 and SP2 and Office 2004 for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers access of an uninitialized stack variable, aka \"Microsoft Office Excel FNGROUPNAME Record Uninitialized Memory Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0263", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/509979/100/0/threaded", "name" : "20100309 ZDI-10-025: Microsoft Office Excel XLSX File Parsing Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-025/", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-025/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8407", "name" : "oval:org.mitre.oval:def:8407", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Excel 2007 SP1 and SP2; Office 2008 for Mac; Open XML File Format Converter for Mac; Office Excel Viewer SP1 and SP2; Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Office SharePoint Server 2007 SP1 and SP2 do not validate ZIP headers during decompression of Open XML (.XLSX) documents, which allows remote attackers to execute arbitrary code via a crafted document that triggers access to uninitialized memory locations, aka \"Microsoft Office Excel XLSX File Parsing Code Execution Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0264", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "excel", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office", "version" : { "version_data" : [ { "version_value" : "2004", "version_affected" : "=" }, { "version_value" : "2008", "version_affected" : "=" } ] } }, { "product_name" : "office_compatibility_pack", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "office_excel_viewer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "office_sharepoint_server", "version" : { "version_data" : [ { "version_value" : "2007", "version_affected" : "=" } ] } }, { "product_name" : "open_xml_file_format_converter", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securitytracker.com/id?1023698", "name" : "1023698", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-017", "name" : "MS10-017", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7888", "name" : "oval:org.mitre.oval:def:7888", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Excel 2002 SP3, Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac do not properly parse the Excel file format, which allows remote attackers to execute arbitrary code via a crafted spreadsheet, aka \"Microsoft Office Excel DbOrParamQry Record Parsing Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:excel:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2004:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2008:*:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_compatibility_pack:2007:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_excel_viewer:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:office_sharepoint_server:2007:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:open_xml_file_format_converter:*:*:mac:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0265", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "producer", "version" : { "version_data" : [ { "version_value" : "2003", "version_affected" : "=" } ] } }, { "product_name" : "windows_movie_maker", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-016", "name" : "MS10-016", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8595", "name" : "oval:org.mitre.oval:def:8595", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft Windows Movie Maker 2.1, 2.6, and 6.0, and Microsoft Producer 2003, allows remote attackers to execute arbitrary code via a crafted project (.MSWMM) file, aka \"Movie Maker and Producer Buffer Overflow Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-016.mspx\r\n\r\n\r\n\r\n'[1]These versions of Windows Movie Maker are delivered with the indicated operating systems.\r\n\r\n[2]Windows Movie Maker 2.6 is an optional download that can be installed on the indicated operating systems. Windows 7 systems without Movie Maker 2.6 installed are not affected." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:2.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:2.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:6.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_movie_maker:2.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:producer:2003:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0266", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "outlook", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-194A.html", "name" : "TA10-194A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-045", "name" : "MS10-045", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11623", "name" : "oval:org.mitre.oval:def:11623", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka \"Microsoft Outlook SMB Attachment Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:outlook:2002:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:outlook:2003:sp3:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:outlook:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:outlook:2007:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-07-15T12:57Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0267", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39023", "name" : "39023", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8554", "name" : "oval:org.mitre.oval:def:8554", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 6, 6 SP1, and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 5.01 Service Pack 4 and Internet Explorer 8 are not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0268", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_media_player", "version" : { "version_data" : [ { "version_value" : "9", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-027", "name" : "MS10-027", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7281", "name" : "oval:org.mitre.oval:def:7281", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Windows Media Player ActiveX control in Windows Media Player (WMP) 9 on Microsoft Windows 2000 SP4 and XP SP2 and SP3 allows remote attackers to execute arbitrary code via crafted media content, aka \"Media Player Remote Code Execution Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_media_player:9:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0269", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39372", "name" : "39372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020", "name" : "MS10-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7129", "name" : "oval:org.mitre.oval:def:7129", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB client in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly allocate memory for SMB responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) SMBv1 or (2) SMBv2 response, aka \"SMB Client Memory Allocation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0270", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39372", "name" : "39372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020", "name" : "MS10-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7164", "name" : "oval:org.mitre.oval:def:7164", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate fields in SMB transaction responses, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted (1) SMBv1 or (2) SMBv2 response, aka \"SMB Client Transaction Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0271", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "opensolaris", "version" : { "version_data" : [ { "version_value" : "snv_12", "version_affected" : "=" }, { "version_value" : "snv_51", "version_affected" : "=" }, { "version_value" : "snv_52", "version_affected" : "=" }, { "version_value" : "snv_53", "version_affected" : "=" }, { "version_value" : "snv_54", "version_affected" : "=" }, { "version_value" : "snv_55", "version_affected" : "=" }, { "version_value" : "snv_56", "version_affected" : "=" }, { "version_value" : "snv_57", "version_affected" : "=" }, { "version_value" : "snv_58", "version_affected" : "=" }, { "version_value" : "snv_59", "version_affected" : "=" }, { "version_value" : "snv_60", "version_affected" : "=" }, { "version_value" : "snv_61", "version_affected" : "=" }, { "version_value" : "snv_62", "version_affected" : "=" }, { "version_value" : "snv_63", "version_affected" : "=" }, { "version_value" : "snv_64", "version_affected" : "=" }, { "version_value" : "snv_65", "version_affected" : "=" }, { "version_value" : "snv_66", "version_affected" : "=" }, { "version_value" : "snv_67", "version_affected" : "=" }, { "version_value" : "snv_68", "version_affected" : "=" }, { "version_value" : "snv_69", "version_affected" : "=" }, { "version_value" : "snv_70", "version_affected" : "=" }, { "version_value" : "snv_71", "version_affected" : "=" }, { "version_value" : "snv_72", "version_affected" : "=" }, { "version_value" : "snv_73", "version_affected" : "=" }, { "version_value" : "snv_74", "version_affected" : "=" }, { "version_value" : "snv_75", "version_affected" : "=" }, { "version_value" : "snv_76", "version_affected" : "=" }, { "version_value" : "snv_77", "version_affected" : "=" }, { "version_value" : "snv_78", "version_affected" : "=" }, { "version_value" : "snv_79", "version_affected" : "=" }, { "version_value" : "snv_80", "version_affected" : "=" }, { "version_value" : "snv_81", "version_affected" : "=" }, { "version_value" : "snv_82", "version_affected" : "=" }, { "version_value" : "snv_83", "version_affected" : "=" }, { "version_value" : "snv_84", "version_affected" : "=" }, { "version_value" : "snv_85", "version_affected" : "=" }, { "version_value" : "snv_86", "version_affected" : "=" }, { "version_value" : "snv_87", "version_affected" : "=" }, { "version_value" : "snv_88", "version_affected" : "=" }, { "version_value" : "snv_89", "version_affected" : "=" }, { "version_value" : "snv_90", "version_affected" : "=" }, { "version_value" : "snv_91", "version_affected" : "=" }, { "version_value" : "snv_92", "version_affected" : "=" }, { "version_value" : "snv_93", "version_affected" : "=" }, { "version_value" : "snv_94", "version_affected" : "=" }, { "version_value" : "snv_95", "version_affected" : "=" }, { "version_value" : "snv_96", "version_affected" : "=" }, { "version_value" : "snv_97", "version_affected" : "=" }, { "version_value" : "snv_98", "version_affected" : "=" }, { "version_value" : "snv_99", "version_affected" : "=" }, { "version_value" : "snv_100", "version_affected" : "=" }, { "version_value" : "snv_101", "version_affected" : "=" }, { "version_value" : "snv_102", "version_affected" : "=" }, { "version_value" : "snv_103", "version_affected" : "=" }, { "version_value" : "snv_104", "version_affected" : "=" }, { "version_value" : "snv_105", "version_affected" : "=" }, { "version_value" : "snv_106", "version_affected" : "=" }, { "version_value" : "snv_107", "version_affected" : "=" }, { "version_value" : "snv_108", "version_affected" : "=" }, { "version_value" : "snv_109", "version_affected" : "=" }, { "version_value" : "snv_110", "version_affected" : "=" }, { "version_value" : "snv_111", "version_affected" : "=" }, { "version_value" : "snv_112", "version_affected" : "=" }, { "version_value" : "snv_113", "version_affected" : "=" }, { "version_value" : "snv_114", "version_affected" : "=" }, { "version_value" : "snv_115", "version_affected" : "=" }, { "version_value" : "snv_116", "version_affected" : "=" }, { "version_value" : "snv_117", "version_affected" : "=" }, { "version_value" : "snv_118", "version_affected" : "=" }, { "version_value" : "snv_119", "version_affected" : "=" }, { "version_value" : "snv_120", "version_affected" : "=" }, { "version_value" : "snv_121", "version_affected" : "=" }, { "version_value" : "snv_122", "version_affected" : "=" }, { "version_value" : "snv_123", "version_affected" : "=" }, { "version_value" : "snv_124", "version_affected" : "=" }, { "version_value" : "snv_125", "version_affected" : "=" }, { "version_value" : "snv_126", "version_affected" : "=" }, { "version_value" : "snv_127", "version_affected" : "=" }, { "version_value" : "snv_128", "version_affected" : "=" }, { "version_value" : "snv_129", "version_affected" : "=" }, { "version_value" : "snv_130", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-274830-1", "name" : "274830", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37656", "name" : "37656", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023416", "name" : "1023416", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0076", "name" : "ADV-2010-0076", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55461", "name" : "opensolaris-hald-weak-security(55461)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "hald in Sun OpenSolaris snv_51 through snv_130 does not have the proc_audit privilege during unspecified attempts to write to the auditing log, which makes it easier for physically proximate attackers to avoid detection of changes to the set of connected hardware devices supporting the Hardware Abstraction Layer (HAL) specification." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_51:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_52:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_53:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_54:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_55:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_56:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_57:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_58:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_59:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_60:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_61:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_62:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_63:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_64:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_65:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_66:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_67:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_68:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_125:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_126:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_127:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_128:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_129:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_130:*:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_12:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_51:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_52:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_54:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_55:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_56:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_57:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_58:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_59:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_60:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_61:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_62:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_63:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_64:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_65:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_66:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_67:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_68:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_69:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_70:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_71:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_72:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_73:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_74:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_75:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_76:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_77:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_78:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_79:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_80:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_81:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_82:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_83:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_84:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_85:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_86:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_87:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_88:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_89:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_90:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_91:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_92:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_93:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_94:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_95:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_96:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_97:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_98:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_99:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_100:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_101:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_102:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_103:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_104:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_105:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_106:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_107:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_108:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_109:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_110:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_111:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_112:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_113:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_114:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_115:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_116:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_117:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_118:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_119:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_120:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_121:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_122:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_123:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_124:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_125:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_126:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_127:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_128:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_129:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_130:*:sparc:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-08T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0272", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.com/sjws_demo.html", "name" : "http://intevydis.com/sjws_demo.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.intevydis.com/blog/?p=102", "name" : "http://www.intevydis.com/blog/?p=102", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55527", "name" : "jsws-data-information-disclosure(55527)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to discover process memory locations via crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:linux:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-08T17:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0273", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.com/sjws_demo.html", "name" : "http://intevydis.com/sjws_demo.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.intevydis.com/blog/?p=102", "name" : "http://www.intevydis.com/blog/?p=102", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attackers to execute arbitrary code by sending a process memory address and crafted data to TCP port 80, as demonstrated by the vd_sjws2 module in VulnDisco. NOTE: as of 20100106, this disclosure has no actionable information. However, because the VulnDisco author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:linux:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-08T17:30Z", "lastModifiedDate" : "2010-01-11T13:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0274", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "229.011", "version_affected" : "=" }, { "version_value" : "229.021", "version_affected" : "=" }, { "version_value" : "229.031", "version_affected" : "=" }, { "version_value" : "229.041", "version_affected" : "=" }, { "version_value" : "229.051", "version_affected" : "=" }, { "version_value" : "229.061", "version_affected" : "=" }, { "version_value" : "229.101", "version_affected" : "=" }, { "version_value" : "229.111", "version_affected" : "=" }, { "version_value" : "229.131", "version_affected" : "=" }, { "version_value" : "229.141", "version_affected" : "=" }, { "version_value" : "229.151", "version_affected" : "=" }, { "version_value" : "229.161", "version_affected" : "=" }, { "version_value" : "229.171", "version_affected" : "=" }, { "version_value" : "229.181", "version_affected" : "=" }, { "version_value" : "229.191", "version_affected" : "=" }, { "version_value" : "229.201", "version_affected" : "=" }, { "version_value" : "229.211", "version_affected" : "=" }, { "version_value" : "229.221", "version_affected" : "=" }, { "version_value" : "229.231", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38026", "name" : "38026", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37675", "name" : "37675", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0077", "name" : "ADV-2010-0077", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55470", "name" : "domino-ultralight-unspecified(55470)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Edit Contact scene in Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 has unknown impact and attack vectors, aka SPR LSHR7TBLY5." }, { "lang" : "en", "value" : "http://www-933.ibm.com/support/fixcentral/" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.141:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.151:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.161:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.171:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.181:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.191:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.201:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.211:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.221:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*", "versionEndIncluding" : "229.231" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-09T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0275", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "229.011", "version_affected" : "=" }, { "version_value" : "229.021", "version_affected" : "=" }, { "version_value" : "229.031", "version_affected" : "=" }, { "version_value" : "229.041", "version_affected" : "=" }, { "version_value" : "229.051", "version_affected" : "=" }, { "version_value" : "229.061", "version_affected" : "=" }, { "version_value" : "229.101", "version_affected" : "=" }, { "version_value" : "229.111", "version_affected" : "=" }, { "version_value" : "229.131", "version_affected" : "=" }, { "version_value" : "229.141", "version_affected" : "=" }, { "version_value" : "229.151", "version_affected" : "=" }, { "version_value" : "229.161", "version_affected" : "=" }, { "version_value" : "229.171", "version_affected" : "=" }, { "version_value" : "229.181", "version_affected" : "=" }, { "version_value" : "229.191", "version_affected" : "=" }, { "version_value" : "229.201", "version_affected" : "=" }, { "version_value" : "229.211", "version_affected" : "=" }, { "version_value" : "229.221", "version_affected" : "=" }, { "version_value" : "229.231", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38026", "name" : "38026", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37675", "name" : "37675", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0077", "name" : "ADV-2010-0077", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55471", "name" : "domino-script-command-unspecified(55471)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Ultra-light Mode in IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle script commands in the status-alerts URL, which has unspecified impact and attack vectors, aka SPR LSHR7TBM58." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.021:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.031:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.041:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.051:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.061:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.101:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.111:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.131:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.141:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.151:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.161:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.171:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.181:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.191:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.201:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.211:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:229.221:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*", "versionEndIncluding" : "229.231" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-09T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0276", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "domino_web_access", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "8.0.2.3", "version_affected" : "=" } ] } }, { "product_name" : "lotus_inotes", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38026", "name" : "38026", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37675", "name" : "37675", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0077", "name" : "ADV-2010-0077", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg27017776", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55473", "name" : "domino-trylotus-unspecified(55473)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "IBM Lotus iNotes (aka Domino Web Access or DWA) before 229.241 for Domino 8.0.2 FP3 does not properly handle navigation of the \"Try Lotus iNotes anyway\" link from the page that reports use of an unsupported browser, which has unspecified impact and attack vectors, aka SPR LSHR7TBMQU." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:domino_web_access:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_inotes:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.0.2.3:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-09T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0277", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adium", "product" : { "product_data" : [ { "product_name" : "adium", "version" : { "version_data" : [ { "version_value" : "1.3.8", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn", "name" : "http://blogs.sun.com/security/entry/cve_2010_0277_malformed_msn", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://developer.pidgin.im/wiki/ChangeLog", "name" : "http://developer.pidgin.im/wiki/ChangeLog", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html", "name" : "http://events.ccc.de/congress/2009/Fahrplan/events/3596.en.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html", "name" : "FEDORA-2010-1279", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html", "name" : "FEDORA-2010-1934", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html", "name" : "FEDORA-2010-1383", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://pidgin.im/news/security/?id=43", "name" : "http://pidgin.im/news/security/?id=43", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38563", "name" : "38563", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38640", "name" : "38640", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38658", "name" : "38658", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38712", "name" : "38712", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/41868", "name" : "41868", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:041", "name" : "MDVSA-2010:041", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085", "name" : "MDVSA-2010:085", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/07/2", "name" : "[oss-security] 20100107 Re: CVE request - pidgin MSN arbitrary file upload", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38294", "name" : "38294", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-902-1", "name" : "USN-902-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0413", "name" : "ADV-2010-0413", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1020", "name" : "ADV-2010-1020", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2693", "name" : "ADV-2010-2693", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=554335", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=554335", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18348", "name" : "oval:org.mitre.oval:def:18348", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9421", "name" : "oval:org.mitre.oval:def:9421", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0115.html", "name" : "RHSA-2010:0115", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "slp.c in the MSN protocol plugin in libpurple in Pidgin before 2.6.6, including 2.6.4, and Adium 1.3.8 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a malformed MSNSLP INVITE request in an SLP message, a different issue than CVE-2010-0013." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adium:adium:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-09T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0278", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_live_messenger", "version" : { "version_data" : [ { "version_value" : "2009", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/508811/100/0/threaded", "name" : "20100108 [HACKATTACK Advisory 080110] Windows Live Messenger 2009 ActiveX DoS Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37680", "name" : "37680", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A certain ActiveX control in msgsc.14.0.8089.726.dll in Microsoft Windows Live Messenger 2009 build 14.0.8089.726 on Windows Vista and Windows 7 allows remote attackers to cause a denial of service (msnmsgr.exe crash) by calling the ViewProfile method with a crafted argument during an MSN Messenger session." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:windows_live_messenger:2009:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-12T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0279", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bts-gi.net", "product" : { "product_data" : [ { "product_name" : "read_excel", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61579", "name" : "61579", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38083", "name" : "38083", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11057", "name" : "11057", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55462", "name" : "readexcel-upload-file-upload(55462)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtained from third party information." }, { "lang" : "en", "value" : "CWE-434 - http://cwe.mitre.org/data/definitions/434.html" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bts-gi.net:read_excel:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-13T01:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0280", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "google", "product" : { "product_data" : [ { "product_name" : "google_sketchup", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.10247", "version_affected" : "=" }, { "version_value" : "7.1.4871", "version_affected" : "=" }, { "version_value" : "7.1.6087", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "jan_eric_krprianidis", "product" : { "product_data" : [ { "product_name" : "lib3ds", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38185", "name" : "38185", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38187", "name" : "38187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303", "name" : "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.coresecurity.com/content/google-sketchup-vulnerability", "name" : "http://www.coresecurity.com/content/google-sketchup-vulnerability", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/508913/100/0/threaded", "name" : "20100113 [CORE-2009-1209] Google SketchUp 'lib3ds' 3DS Importer Memory Corruption", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37708", "name" : "37708", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0133", "name" : "ADV-2010-0133", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Array index error in Jan Eric Kyprianidis lib3ds 1.x, as used in Google SketchUp 7.x before 7.1 M2, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via crafted structures in a 3DS file, probably related to mesh.c." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jan_eric_krprianidis:lib3ds:1.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.0.10247:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.1.4871:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.1.6087:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T17:30Z", "lastModifiedDate" : "2018-10-10T19:51Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0283", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mit", "product" : { "product_data" : [ { "product_name" : "kerberos", "version" : { "version_data" : [ { "version_value" : "5-1.8", "version_affected" : "=" } ] } }, { "product_name" : "kerberos_5", "version" : { "version_data" : [ { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035222.html", "name" : "FEDORA-2010-1722", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38598", "name" : "38598", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39023", "name" : "39023", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023593", "name" : "1023593", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt", "name" : "http://web.mit.edu/kerberos/advisories/MITKRB5-SA-2010-001.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509553/100/0/threaded", "name" : "20100216 MITKRB5-SA-2010-001 [CVE-2010-0283] krb5-1.7 KDC denial of service", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38260", "name" : "38260", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-916-1", "name" : "USN-916-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 before 1.7.2, and 1.8 alpha, allows remote attackers to cause a denial of service (assertion failure and daemon crash) via an invalid (1) AS-REQ or (2) TGS-REQ request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mit:kerberos:5-1.8:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mit:kerberos_5:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mit:kerberos_5:1.7.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2020-01-21T15:45Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0284", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "access_manager", "version" : { "version_data" : [ { "version_value" : "3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/40198", "name" : "40198", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.novell.com/support/viewContent.do?externalId=7006255&sliceId=1", "name" : "http://www.novell.com/support/viewContent.do?externalId=7006255&sliceId=1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40931", "name" : "40931", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024132", "name" : "1024132", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1516", "name" : "ADV-2010-1516", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59528", "name" : "accessmgr-admincosole-getentry-file-upload(59528)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the getEntry method in the PortalModuleInstallManager component in a servlet in nps.jar in the Administration Console (aka Access Management Console) in Novell Access Manager 3.1 before 3.1.2-281 on Windows allows remote attackers to create arbitrary files with any contents, and consequently execute arbitrary code, via a .. (dot dot) in a parameter, aka ZDI-CAN-678." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:access_manager:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:novell:access_manager:3.1:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-18T16:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0285", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "screensaver", "version" : { "version_data" : [ { "version_value" : "2.14.3", "version_affected" : "=" }, { "version_value" : "2.22.2", "version_affected" : "=" }, { "version_value" : "2.27", "version_affected" : "=" }, { "version_value" : "2.28.0", "version_affected" : "=" }, { "version_value" : "2.28.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=2f597ea9f1f363277fd4dfc109fa41bbc6225aca", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://security-tracker.debian.org/tracker/CVE-2010-0285", "name" : "http://security-tracker.debian.org/tracker/CVE-2010-0285", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:093", "name" : "MDVSA-2011:093", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38254", "name" : "38254", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=593616", "name" : "https://bugzilla.gnome.org/show_bug.cgi?id=593616", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=557525", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=557525", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56366", "name" : "screensaver-monitor-setup-sec-bypass(56366)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.22.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:C/I:C/A:N", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "NONE", "baseScore" : 5.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 9.2, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-24T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0286", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "typo3", "version" : { "version_data" : [ { "version_value" : "4.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61680", "name" : "61680", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38206", "name" : "38206", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2010-001/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0127", "name" : "ADV-2010-0127", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55609", "name" : "typo3-openid-security-bypass(55609)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities during authentication." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:4.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T13:26Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0287", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dokuwiki", "product" : { "product_data" : [ { "product_name" : "dokuwiki", "version" : { "version_data" : [ { "version_value" : "2004-07-04", "version_affected" : "=" }, { "version_value" : "2004-07-07", "version_affected" : "=" }, { "version_value" : "2004-07-12", "version_affected" : "=" }, { "version_value" : "2004-07-21", "version_affected" : "=" }, { "version_value" : "2004-07-25", "version_affected" : "=" }, { "version_value" : "2004-08-08", "version_affected" : "=" }, { "version_value" : "2004-08-15a", "version_affected" : "=" }, { "version_value" : "2004-08-22", "version_affected" : "=" }, { "version_value" : "2004-09-12", "version_affected" : "=" }, { "version_value" : "2004-09-25", "version_affected" : "=" }, { "version_value" : "2004-09-30", "version_affected" : "=" }, { "version_value" : "2004-11-01", "version_affected" : "=" }, { "version_value" : "2004-11-02", "version_affected" : "=" }, { "version_value" : "2004-11-10", "version_affected" : "=" }, { "version_value" : "2005-01-14", "version_affected" : "=" }, { "version_value" : "2005-01-15", "version_affected" : "=" }, { "version_value" : "2005-01-16a", "version_affected" : "=" }, { "version_value" : "2005-02-06", "version_affected" : "=" }, { "version_value" : "2005-02-18", "version_affected" : "=" }, { "version_value" : "2005-05-07", "version_affected" : "=" }, { "version_value" : "2005-07-01", "version_affected" : "=" }, { "version_value" : "2005-07-13", "version_affected" : "=" }, { "version_value" : "2005-09-19", "version_affected" : "=" }, { "version_value" : "2005-09-22", "version_affected" : "=" }, { "version_value" : "2006-03-05", "version_affected" : "=" }, { "version_value" : "2006-03-09", "version_affected" : "=" }, { "version_value" : "2006-03-09e", "version_affected" : "=" }, { "version_value" : "2006-06-04", "version_affected" : "=" }, { "version_value" : "release_2009-02-14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1847", "name" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1847", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html", "name" : "FEDORA-2010-0770", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html", "name" : "FEDORA-2010-0800", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38183", "name" : "38183", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201301-07.xml", "name" : "GLSA-201301-07", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1976", "name" : "DSA-1976", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/11141", "name" : "11141", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37821", "name" : "37821", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "name" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0150", "name" : "ADV-2010-0150", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55660", "name" : "dokuwiki-ajax-dir-traversal(55660)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to list the contents of arbitrary directories via a .. (dot dot) in the ns parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-15a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-16a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-05-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-06-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*", "versionEndIncluding" : "release_2009-02-14" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2019-09-23T18:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0288", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dokuwiki", "product" : { "product_data" : [ { "product_name" : "dokuwiki", "version" : { "version_data" : [ { "version_value" : "2004-07-04", "version_affected" : "=" }, { "version_value" : "2004-07-07", "version_affected" : "=" }, { "version_value" : "2004-07-12", "version_affected" : "=" }, { "version_value" : "2004-07-21", "version_affected" : "=" }, { "version_value" : "2004-07-25", "version_affected" : "=" }, { "version_value" : "2004-08-08", "version_affected" : "=" }, { "version_value" : "2004-08-15a", "version_affected" : "=" }, { "version_value" : "2004-08-22", "version_affected" : "=" }, { "version_value" : "2004-09-12", "version_affected" : "=" }, { "version_value" : "2004-09-25", "version_affected" : "=" }, { "version_value" : "2004-09-30", "version_affected" : "=" }, { "version_value" : "2004-11-01", "version_affected" : "=" }, { "version_value" : "2004-11-02", "version_affected" : "=" }, { "version_value" : "2004-11-10", "version_affected" : "=" }, { "version_value" : "2005-01-14", "version_affected" : "=" }, { "version_value" : "2005-01-15", "version_affected" : "=" }, { "version_value" : "2005-01-16a", "version_affected" : "=" }, { "version_value" : "2005-02-06", "version_affected" : "=" }, { "version_value" : "2005-02-18", "version_affected" : "=" }, { "version_value" : "2005-05-07", "version_affected" : "=" }, { "version_value" : "2005-07-01", "version_affected" : "=" }, { "version_value" : "2005-07-13", "version_affected" : "=" }, { "version_value" : "2005-09-19", "version_affected" : "=" }, { "version_value" : "2005-09-22", "version_affected" : "=" }, { "version_value" : "2006-03-05", "version_affected" : "=" }, { "version_value" : "2006-03-09", "version_affected" : "=" }, { "version_value" : "2006-03-09e", "version_affected" : "=" }, { "version_value" : "2006-06-04", "version_affected" : "=" }, { "version_value" : "release_2009-02-14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1847", "name" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1847", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html", "name" : "FEDORA-2010-0770", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html", "name" : "FEDORA-2010-0800", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://osvdb.org/61710", "name" : "61710", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38183", "name" : "38183", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201301-07.xml", "name" : "GLSA-201301-07", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1976", "name" : "DSA-1976", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.exploit-db.com/exploits/11141", "name" : "11141", "refsource" : "EXPLOIT-DB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37820", "name" : "37820", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "name" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0150", "name" : "ADV-2010-0150", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55661", "name" : "dokuwiki-ajax-security-bypass(55661)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "A typo in the administrator permission check in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25b allows remote attackers to gain privileges and access closed wikis by editing current ACL statements, as demonstrated in the wild in January 2010." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-15a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-16a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-05-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-06-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*", "versionEndIncluding" : "release_2009-02-14" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2019-09-23T18:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0289", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dokuwiki", "product" : { "product_data" : [ { "product_name" : "dokuwiki", "version" : { "version_data" : [ { "version_value" : "2004-07-04", "version_affected" : "=" }, { "version_value" : "2004-07-07", "version_affected" : "=" }, { "version_value" : "2004-07-12", "version_affected" : "=" }, { "version_value" : "2004-07-21", "version_affected" : "=" }, { "version_value" : "2004-07-25", "version_affected" : "=" }, { "version_value" : "2004-08-08", "version_affected" : "=" }, { "version_value" : "2004-08-15a", "version_affected" : "=" }, { "version_value" : "2004-08-22", "version_affected" : "=" }, { "version_value" : "2004-09-12", "version_affected" : "=" }, { "version_value" : "2004-09-25", "version_affected" : "=" }, { "version_value" : "2004-09-30", "version_affected" : "=" }, { "version_value" : "2004-11-01", "version_affected" : "=" }, { "version_value" : "2004-11-02", "version_affected" : "=" }, { "version_value" : "2004-11-10", "version_affected" : "=" }, { "version_value" : "2005-01-14", "version_affected" : "=" }, { "version_value" : "2005-01-15", "version_affected" : "=" }, { "version_value" : "2005-01-16a", "version_affected" : "=" }, { "version_value" : "2005-02-06", "version_affected" : "=" }, { "version_value" : "2005-02-18", "version_affected" : "=" }, { "version_value" : "2005-05-07", "version_affected" : "=" }, { "version_value" : "2005-07-01", "version_affected" : "=" }, { "version_value" : "2005-07-13", "version_affected" : "=" }, { "version_value" : "2005-09-19", "version_affected" : "=" }, { "version_value" : "2005-09-22", "version_affected" : "=" }, { "version_value" : "2006-03-05", "version_affected" : "=" }, { "version_value" : "2006-03-09", "version_affected" : "=" }, { "version_value" : "2006-03-09e", "version_affected" : "=" }, { "version_value" : "2006-06-04", "version_affected" : "=" }, { "version_value" : "release_2009-02-14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1853", "name" : "http://bugs.splitbrain.org/index.php?do=details&task_id=1853", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://freshmeat.net/projects/dokuwiki/tags/security-fix", "name" : "http://freshmeat.net/projects/dokuwiki/tags/security-fix", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034729.html", "name" : "FEDORA-2010-0770", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034831.html", "name" : "FEDORA-2010-0800", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://osvdb.org/61708", "name" : "61708", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38205", "name" : "38205", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201301-07.xml", "name" : "GLSA-201301-07", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1976", "name" : "DSA-1976", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "name" : "http://www.splitbrain.org/blog/2010-01/17-dokuwiki-security", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site request forgery (CSRF) vulnerabilities in the ACL Manager plugin (plugins/acl/ajax.php) in DokuWiki before 2009-12-25c allow remote attackers to hijack the authentication of administrators for requests that modify access control rules, and other unspecified requests, via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-07-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-08:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-15a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-08-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-09-30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2004-11-10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-01-16a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-06:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-02-18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-05-07:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-07-13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2005-09-22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-05:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-03-09e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:2006-06-04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dokuwiki:dokuwiki:*:*:*:*:*:*:*:*", "versionEndIncluding" : "release_2009-02-14" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2019-09-23T18:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0290", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "9.6.1", "version_affected" : "=" }, { "version_value" : "9.7.0", "version_affected" : "=" }, { "version_value" : "9.10.0", "version_affected" : "=" }, { "version_value" : "9.10.1", "version_affected" : "=" }, { "version_value" : "9.10.2", "version_affected" : "=" }, { "version_value" : "9.10.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-01/msg00009.html", "name" : "SUSE-SA:2010:008", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126393609503704&w=2", "name" : "[oss-security] 20100119 BIND CVE-2009-4022 fix incomplete", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126399602810086&w=2", "name" : "[oss-security] 20100120 Re: BIND CVE-2009-4022 fix incomplete", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38219", "name" : "38219", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38240", "name" : "38240", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40086", "name" : "40086", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "name" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2054", "name" : "DSA-2054", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:021", "name" : "MDVSA-2010:021", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-888-1", "name" : "USN-888-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0176", "name" : "ADV-2010-0176", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0622", "name" : "ADV-2010-0622", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1352", "name" : "ADV-2010-1352", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=554851", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=554851", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=557121", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=557121", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6815", "name" : "oval:org.mitre.oval:def:6815", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7512", "name" : "oval:org.mitre.oval:def:7512", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8884", "name" : "oval:org.mitre.oval:def:8884", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0062.html", "name" : "RHSA-2010:0062", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://www.isc.org/advisories/CVE-2009-4022v6", "name" : "https://www.isc.org/advisories/CVE-2009-4022v6", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta, with DNSSEC validation enabled and checking disabled (CD), allows remote attackers to conduct DNS cache poisoning attacks by receiving a recursive client query and sending a response that contains (1) CNAME or (2) DNAME records, which do not have the intended validation before caching, aka Bug 20737. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-4022." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0291", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.4.37.6", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0067bd8a55862ac9dd212bd1c4f6f5bff1ca1301", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0067bd8a55862ac9dd212bd1c4f6f5bff1ca1301", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=05d72faa6d13c9d857478a5d35c85db9adada685", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=05d72faa6d13c9d857478a5d35c85db9adada685", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=097eed103862f9c6a97f2e415e21d1134017b135", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=097eed103862f9c6a97f2e415e21d1134017b135", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0ec62d290912bb4b989be7563851bc364ec73b56", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=0ec62d290912bb4b989be7563851bc364ec73b56", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1a0ef85f84feb13f07b604fcf5b90ef7c2b5c82f", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=1a0ef85f84feb13f07b604fcf5b90ef7c2b5c82f", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2c6a10161d0b5fc047b5bd81b03693b9af99fab5", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2c6a10161d0b5fc047b5bd81b03693b9af99fab5", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2ea1d13f64efdf49319e86c87d9ba38c30902782", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=2ea1d13f64efdf49319e86c87d9ba38c30902782", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=54f5de709984bae0d31d823ff03de755f9dcac54", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=54f5de709984bae0d31d823ff03de755f9dcac54", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=564b3bffc619dcbdd160de597b0547a7017ea010", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=564b3bffc619dcbdd160de597b0547a7017ea010", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=570dcf2c15463842e384eb597a87c1e39bead99b", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=570dcf2c15463842e384eb597a87c1e39bead99b", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8c7b49b3ecd48923eb64ff57e07a1cdb74782970", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=8c7b49b3ecd48923eb64ff57e07a1cdb74782970", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9206de95b1ea68357996ec02be5db0638a0de2c1", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=9206de95b1ea68357996ec02be5db0638a0de2c1", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=935874141df839c706cd6cdc438e85eb69d1525e", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=935874141df839c706cd6cdc438e85eb69d1525e", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=aa65607373a4daf2010e8c3867b6317619f3c1a3", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=aa65607373a4daf2010e8c3867b6317619f3c1a3", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bb52d6694002b9d632bb355f64daa045c6293a4e", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=bb52d6694002b9d632bb355f64daa045c6293a4e", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c4caa778157dbbf04116f0ac2111e389b5cd7a29", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=c4caa778157dbbf04116f0ac2111e389b5cd7a29", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e77414e0aad6a1b063ba5e5750c582c75327ea6a", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e77414e0aad6a1b063ba5e5750c582c75327ea6a", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ecc1a8993751de4e82eb18640d631dae1f626bd6", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=ecc1a8993751de4e82eb18640d631dae1f626bd6", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f106af4e90eadd76cfc0b5325f659619e08fb762", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f106af4e90eadd76cfc0b5325f659619e08fb762", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f8b7256096a20436f6d0926747e3ac3d64c81d24", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f8b7256096a20436f6d0926747e3ac3d64c81d24", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://groups.google.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090", "name" : "http://groups.google.co.jp/group/fa.linux.kernel/browse_thread/thread/8bf22336b1082090", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://groups.google.com/group/linux.kernel/msg/895f20870532241e", "name" : "[linux-kernel] 20100114 [PATCH 01/52] untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=linux-arch&m=126004438008670&w=2", "name" : "[linux-kernel] 20091205 [RFC][PATCHSET] mremap/mmap mess", "refsource" : "MLIST", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126388181420690&w=2", "name" : "[oss-security] 20100119 CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126393370931972&w=2", "name" : "[oss-security] 20100119 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126395874130875&w=2", "name" : "[oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126396065732697&w=2", "name" : "[oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126396609004884&w=2", "name" : "[oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126399980216047&w=2", "name" : "[oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126400443123998&w=2", "name" : "[oss-security] 20100120 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=oss-security&m=126406814304720&w=2", "name" : "[oss-security] 20100121 Re: CVE request - kernel: untangle the do_mremap() mess", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2005", "name" : "DSA-2005", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.4", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/37906", "name" : "37906", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=556703", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=556703", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11824", "name" : "oval:org.mitre.oval:def:11824", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Linux kernel before 2.6.32.4 allows local users to gain privileges or cause a denial of service (panic) by calling the (1) mmap or (2) mremap function, aka the \"do_mremap() mess\" or \"mremap/mmap mess.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.32.4" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-15T18:30Z", "lastModifiedDate" : "2018-11-16T15:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0292", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tuxfamily", "product" : { "product_data" : [ { "product_name" : "chrony", "version" : { "version_data" : [ { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19-1", "version_affected" : "=" }, { "version_value" : "1.19.99.1", "version_affected" : "=" }, { "version_value" : "1.19.99.2", "version_affected" : "=" }, { "version_value" : "1.19.99.3", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21-pre1", "version_affected" : "=" }, { "version_value" : "1.23-pre1", "version_affected" : "<=" }, { "version_value" : "1.24-pre1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://chrony.tuxfamily.org/News.html", "name" : "http://chrony.tuxfamily.org/News.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=7864c7a70ce00369194e734eb2842ecc5f8db531", "name" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=7864c7a70ce00369194e734eb2842ecc5f8db531", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38428", "name" : "38428", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38480", "name" : "38480", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1992", "name" : "DSA-1992", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38106", "name" : "38106", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The read_from_cmd_socket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service (CPU and bandwidth consumption) by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a related issue to CVE-2009-3563." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21-pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.23-pre1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.24-pre1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-08T20:30Z", "lastModifiedDate" : "2010-02-09T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0293", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tuxfamily", "product" : { "product_data" : [ { "product_name" : "chrony", "version" : { "version_data" : [ { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19-1", "version_affected" : "=" }, { "version_value" : "1.19.99.1", "version_affected" : "=" }, { "version_value" : "1.19.99.2", "version_affected" : "=" }, { "version_value" : "1.19.99.3", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21-pre1", "version_affected" : "=" }, { "version_value" : "1.23-pre1", "version_affected" : "<=" }, { "version_value" : "1.24-pre1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://chrony.tuxfamily.org/News.html", "name" : "http://chrony.tuxfamily.org/News.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=2f63cf448560fdb96b80d8488aae6a15b802a753", "name" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=2f63cf448560fdb96b80d8488aae6a15b802a753", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38428", "name" : "38428", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38480", "name" : "38480", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1992", "name" : "DSA-1992", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38106", "name" : "38106", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The client logging functionality in chronyd in Chrony before 1.23.1 does not restrict the amount of memory used for storage of client information, which allows remote attackers to cause a denial of service (memory consumption) via spoofed (1) NTP or (2) cmdmon packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21-pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.23-pre1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.24-pre1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-08T20:30Z", "lastModifiedDate" : "2010-02-09T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0294", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tuxfamily", "product" : { "product_data" : [ { "product_name" : "chrony", "version" : { "version_data" : [ { "version_value" : "1.18", "version_affected" : "=" }, { "version_value" : "1.19", "version_affected" : "=" }, { "version_value" : "1.19-1", "version_affected" : "=" }, { "version_value" : "1.19.99.1", "version_affected" : "=" }, { "version_value" : "1.19.99.2", "version_affected" : "=" }, { "version_value" : "1.19.99.3", "version_affected" : "=" }, { "version_value" : "1.20", "version_affected" : "=" }, { "version_value" : "1.21", "version_affected" : "=" }, { "version_value" : "1.21-pre1", "version_affected" : "=" }, { "version_value" : "1.23-pre1", "version_affected" : "<=" }, { "version_value" : "1.24-pre1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://chrony.tuxfamily.org/News.html", "name" : "http://chrony.tuxfamily.org/News.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=0b710499f994823bd938fc6895f097eefb9cc59f", "name" : "http://git.tuxfamily.org/chrony/chrony.git/?p=gitroot/chrony/chrony.git;a=commit;h=0b710499f994823bd938fc6895f097eefb9cc59f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38428", "name" : "38428", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38480", "name" : "38480", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1992", "name" : "DSA-1992", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38106", "name" : "38106", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555367", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "chronyd in Chrony before 1.23.1, and possibly 1.24-pre1, generates a syslog message for each unauthorized cmdmon packet, which allows remote attackers to cause a denial of service (disk consumption) via a large number of invalid packets." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.19.99.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.21-pre1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.23-pre1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tuxfamily:chrony:1.24-pre1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-08T20:30Z", "lastModifiedDate" : "2010-02-09T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0295", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "lighttpd", "product" : { "product_data" : [ { "product_name" : "lighttpd", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.4.16", "version_affected" : "=" }, { "version_value" : "1.4.17", "version_affected" : "=" }, { "version_value" : "1.4.18", "version_affected" : "=" }, { "version_value" : "1.4.19", "version_affected" : "=" }, { "version_value" : "1.4.20", "version_affected" : "=" }, { "version_value" : "1.4.21", "version_affected" : "=" }, { "version_value" : "1.4.22", "version_affected" : "=" }, { "version_value" : "1.4.23", "version_affected" : "=" }, { "version_value" : "1.4.24", "version_affected" : "=" }, { "version_value" : "1.4.25", "version_affected" : "<=" }, { "version_value" : "1.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.sun.com/security/entry/cve_2010_0295_vulnerability_in", "name" : "http://blogs.sun.com/security/entry/cve_2010_0295_vulnerability_in", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt", "name" : "http://download.lighttpd.net/lighttpd/security/lighttpd_sa_2010_01.txt", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.x_fix_slow_request_dos.patch", "name" : "http://download.lighttpd.net/lighttpd/security/lighttpd-1.4.x_fix_slow_request_dos.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://download.lighttpd.net/lighttpd/security/lighttpd-1.5_fix_slow_request_dos.patch", "name" : "http://download.lighttpd.net/lighttpd/security/lighttpd-1.5_fix_slow_request_dos.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041264.html", "name" : "FEDORA-2010-7636", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041296.html", "name" : "FEDORA-2010-7611", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/041307.html", "name" : "FEDORA-2010-7643", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00003.html", "name" : "SUSE-SR:2010:003", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://redmine.lighttpd.net/issues/2147", "name" : "http://redmine.lighttpd.net/issues/2147", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2710", "name" : "http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2710", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2711", "name" : "http://redmine.lighttpd.net/projects/lighttpd/repository/revisions/2711", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38403", "name" : "38403", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39765", "name" : "39765", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201006-17.xml", "name" : "GLSA-201006-17", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1987", "name" : "DSA-1987", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/01/8", "name" : "[oss-security] 20100202 lighttpd: slow request dos/oom attack [CVE-2010-0295]", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38036", "name" : "38036", "refsource" : "BID", "tags" : [ "Exploit", "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0172", "name" : "ADV-2011-0172", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56038", "name" : "lighttpd-slow-request-dos(56038)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lighttpd before 1.4.26, and 1.5.x, allocates a buffer for each read operation that occurs for a request, which allows remote attackers to cause a denial of service (memory consumption) by breaking a request into small pieces that are sent at a slow rate." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.4.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.25" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:lighttpd:lighttpd:1.5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0296", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnu", "product" : { "product_data" : [ { "product_name" : "glibc", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.1.6", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "2.8", "version_affected" : "=" }, { "version_value" : "2.9", "version_affected" : "=" }, { "version_value" : "2.10", "version_affected" : "=" }, { "version_value" : "2.10.1", "version_affected" : "=" }, { "version_value" : "2.11", "version_affected" : "=" }, { "version_value" : "2.11.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://frugalware.org/security/662", "name" : "http://frugalware.org/security/662", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html", "name" : "http://packetstormsecurity.com/files/153278/WAGO-852-Industrial-Managed-Switch-Series-Code-Execution-Hardcoded-Credentials.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://seclists.org/fulldisclosure/2019/Jun/18", "name" : "20190612 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39900", "name" : "39900", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43830", "name" : "43830", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/46397", "name" : "46397", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201011-01.xml", "name" : "GLSA-201011-01", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1024043", "name" : "1024043", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540", "name" : "http://sourceware.org/git/?p=glibc.git;a=commit;h=ab00f4eac8f4932211259ff87be83144f5211540", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2058", "name" : "DSA-2058", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:111", "name" : "MDVSA-2010:111", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:112", "name" : "MDVSA-2010:112", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2011-0412.html", "name" : "RHSA-2011:0412", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/520102/100/0/threaded", "name" : "20111013 VMSA-2011-0012 VMware ESXi and ESX updates to third party libraries and ESX Service Console", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-944-1", "name" : "USN-944-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0012.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0012.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1246", "name" : "ADV-2010-1246", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0863", "name" : "ADV-2011-0863", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559579", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559579", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/59240", "name" : "gnuclibrary-encodenamemacro-dos(59240)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://lists.opensuse.org/opensuse-security-announce/2010-10/msg00007.html", "name" : "SUSE-SA:2010:052", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "https://seclists.org/bugtraq/2019/Jun/14", "name" : "20190613 SEC Consult SA-20190612-0 :: Multiple vulnerabilities in WAGO 852 Industrial Managed Switch Series", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The encode_name macro in misc/mntent_r.c in the GNU C Library (aka glibc or libc6) 2.11.1 and earlier, as used by ncpmount and mount.cifs, does not properly handle newline characters in mountpoint names, which allows local users to cause a denial of service (mtab corruption), or possibly modify mount options and gain privileges, via a crafted mount request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnu:glibc:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.11.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-01T20:30Z", "lastModifiedDate" : "2019-06-13T21:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0297", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "qemu", "product" : { "product_data" : [ { "product_name" : "qemu", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.1.5", "version_affected" : "=" }, { "version_value" : "0.1.6", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.4", "version_affected" : "=" }, { "version_value" : "0.4.1", "version_affected" : "=" }, { "version_value" : "0.4.2", "version_affected" : "=" }, { "version_value" : "0.4.3", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.5.4", "version_affected" : "=" }, { "version_value" : "0.5.5", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.7.0", "version_affected" : "=" }, { "version_value" : "0.7.1", "version_affected" : "=" }, { "version_value" : "0.7.2", "version_affected" : "=" }, { "version_value" : "0.8.0", "version_affected" : "=" }, { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.1-5", "version_affected" : "=" }, { "version_value" : "0.10.0", "version_affected" : "=" }, { "version_value" : "0.10.1", "version_affected" : "=" }, { "version_value" : "0.10.2", "version_affected" : "=" }, { "version_value" : "0.10.3", "version_affected" : "=" }, { "version_value" : "0.10.4", "version_affected" : "=" }, { "version_value" : "0.10.5", "version_affected" : "=" }, { "version_value" : "0.10.6", "version_affected" : "=" }, { "version_value" : "0.11.0", "version_affected" : "<=" }, { "version_value" : "0.11.0-rc0", "version_affected" : "=" }, { "version_value" : "0.11.0-rc1", "version_affected" : "=" }, { "version_value" : "0.11.0-rc2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde68093482528010a5435c14ce9128e3f", "name" : "http://git.savannah.gnu.org/cgit/qemu.git/commit/?id=babd03fde68093482528010a5435c14ce9128e3f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126510479211473&w=2", "name" : "[oss-security] 20100202 KVM possible security issues fixed", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126527304127254&w=2", "name" : "[oss-security] 20100204 Re: KVM possible security issues fixed", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://wiki.qemu.org/ChangeLog", "name" : "http://wiki.qemu.org/ChangeLog", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/kvm@vger.kernel.org/msg18447.html", "name" : "[kvm] 20090702 KVM crashes when using certain USB device", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/kvm@vger.kernel.org/msg19581.html", "name" : "[kvm] 20090721 Re: KVM crashes when using certain USB device", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/kvm@vger.kernel.org/msg19596.html", "name" : "[kvm] 20090721 Re: KVM crashes when using certain USB device", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38158", "name" : "38158", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=557025", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=557025", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56194", "name" : "kernel-usb-bo(56194)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11786", "name" : "oval:org.mitre.oval:def:11786", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0088.html", "name" : "RHSA-2010:0088", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the usb_host_handle_control function in the USB passthrough handling implementation in usb-linux.c in QEMU before 0.11.1 allows guest OS users to cause a denial of service (guest OS crash or hang) or possibly execute arbitrary code on the host OS via a crafted USB packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.9.1-5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.11.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.11.0-rc0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.11.0-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:qemu:qemu:0.11.0-rc2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-12T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0298", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38158", "name" : "38158", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559091", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559091", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11335", "name" : "oval:org.mitre.oval:def:11335", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0088.html", "name" : "RHSA-2010:0088", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html", "name" : "RHSA-2010:0095", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The x86 emulator in KVM 83 does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) in determining the memory access available to CPL3 code, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, a related issue to CVE-2010-0306." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-12T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0299", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "opensuse", "product" : { "product_data" : [ { "product_name" : "opensuse", "version" : { "version_data" : [ { "version_value" : "11.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-02/msg00002.html", "name" : "SUSE-SA:2010:010", "refsource" : "SUSE", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "openSUSE 11.2 installs the devtmpfs root directory with insecure permissions (1777), which allows local users to gain privileges via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:opensuse:opensuse:11.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T18:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0300", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ircd-ratbox", "product" : { "product_data" : [ { "product_name" : "ircd-ratbox", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.7.1", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.ratbox.org/pipermail/ircd-ratbox/2010-January/000891.html", "name" : "[ircd-ratbox] 20100125 ircd-ratbox-2.2.9 released", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38210", "name" : "38210", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38383", "name" : "38383", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.debian.org/pool/updates/main/i/ircd-ratbox/ircd-ratbox_2.2.8.dfsg-2+lenny1.diff.gz", "name" : "http://security.debian.org/pool/updates/main/i/ircd-ratbox/ircd-ratbox_2.2.8.dfsg-2+lenny1.diff.gz", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1980", "name" : "DSA-1980", "refsource" : "DEBIAN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "cache.c in ircd-ratbox before 2.2.9 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a HELP command." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/476.html\r\n\r\n'CWE-476: NULL Pointer Dereference'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:1.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:2.2.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ircd-ratbox:ircd-ratbox:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.2.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2010-02-05T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0301", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "maildrop", "product" : { "product_data" : [ { "product_name" : "maildrop", "version" : { "version_data" : [ { "version_value" : "0.50", "version_affected" : "=" }, { "version_value" : "0.51", "version_affected" : "=" }, { "version_value" : "0.51b", "version_affected" : "=" }, { "version_value" : "0.51c", "version_affected" : "=" }, { "version_value" : "0.54", "version_affected" : "=" }, { "version_value" : "0.54a", "version_affected" : "=" }, { "version_value" : "0.54b", "version_affected" : "=" }, { "version_value" : "0.55", "version_affected" : "=" }, { "version_value" : "0.55a", "version_affected" : "=" }, { "version_value" : "0.55b", "version_affected" : "=" }, { "version_value" : "0.55c", "version_affected" : "=" }, { "version_value" : "0.60", "version_affected" : "=" }, { "version_value" : "0.61", "version_affected" : "=" }, { "version_value" : "0.62", "version_affected" : "=" }, { "version_value" : "0.63", "version_affected" : "=" }, { "version_value" : "0.64", "version_affected" : "=" }, { "version_value" : "0.65", "version_affected" : "=" }, { "version_value" : "0.70", "version_affected" : "=" }, { "version_value" : "0.71", "version_affected" : "=" }, { "version_value" : "0.72", "version_affected" : "=" }, { "version_value" : "0.73", "version_affected" : "=" }, { "version_value" : "0.74", "version_affected" : "=" }, { "version_value" : "0.75", "version_affected" : "=" }, { "version_value" : "0.76", "version_affected" : "=" }, { "version_value" : "0.99.1", "version_affected" : "=" }, { "version_value" : "0.99.2", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.8.1", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=564601", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126462927918840&w=2", "name" : "[oss-security] 20100127 CVE id request: maildrop", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126468324913920&w=2", "name" : "[oss-security] 20100128 Re: CVE id request: maildrop", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126468551017070&w=2", "name" : "[oss-security] 20100128 Re: CVE id request: maildrop", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126468618017829&w=2", "name" : "[oss-security] 20100128 Re: CVE id request: maildrop", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38367", "name" : "38367", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38374", "name" : "38374", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023515", "name" : "1023515", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.courier-mta.org/maildrop/changelog.html", "name" : "http://www.courier-mta.org/maildrop/changelog.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1981", "name" : "DSA-1981", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559681", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559681", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55980", "name" : "maildrop-group-priv-escalation(55980)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "main.C in maildrop 2.3.0 and earlier, when run by root with the -d option, uses the gid of root for execution of the .mailfilter file in a user's home directory, which allows local users to gain privileges via a crafted file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.51b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.51c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.54a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.54b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.55a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.55b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.55c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.64:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.70:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.71:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.72:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.73:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.74:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.75:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.76:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.99.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:0.99.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:1.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:maildrop:maildrop:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.3.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0302", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "cups", "version" : { "version_data" : [ { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cups.org/articles.php?L596", "name" : "http://cups.org/articles.php?L596", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://cups.org/str.php?L3490", "name" : "http://cups.org/str.php?L3490", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037174.html", "name" : "FEDORA-2010-2743", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38785", "name" : "38785", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38927", "name" : "38927", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38979", "name" : "38979", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201207-10.xml", "name" : "GLSA-201207-10", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073", "name" : "MDVSA-2010:073", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38510", "name" : "38510", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1024124", "name" : "1024124", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-906-1", "name" : "USN-906-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=557775", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=557775", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11216", "name" : "oval:org.mitre.oval:def:11216", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0129.html", "name" : "RHSA-2010:0129", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in the abstract file-descriptor handling interface in the cupsdDoSelect function in scheduler/select.c in the scheduler in cupsd in CUPS before 1.4.4, when kqueue or epoll is used, allows remote attackers to cause a denial of service (daemon crash or hang) via a client disconnection during listing of a large number of print jobs, related to improperly maintaining a reference count. NOTE: some of these details are obtained from third party information. NOTE: this vulnerability exists because of an incomplete fix for CVE-2009-3553." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0303", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "dinko_korunic", "product" : { "product_data" : [ { "product_name" : "hybserv2", "version" : { "version_data" : [ { "version_value" : "1.9.2", "version_affected" : "=" }, { "version_value" : "1.9.3", "version_affected" : "=" }, { "version_value" : "1.9.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=550389", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126476591925300&w=2", "name" : "[oss-security] 20100129 Re: CVE id: hybserv", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38350", "name" : "38350", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38352", "name" : "38352", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz", "name" : "http://security.debian.org/pool/updates/main/h/hybserv/hybserv_1.9.2-4+lenny2.diff.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1982", "name" : "DSA-1982", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38006", "name" : "38006", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55992", "name" : "hybserv2-privatemessage-dos(55992)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "mystring.c in hybserv in IRCD-Hybrid (aka Hybrid2 IRC Services) 1.9.2 through 1.9.4 allows remote attackers to cause a denial of service (daemon crash) via a \":help \\t\" private message to the MemoServ service." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dinko_korunic:hybserv2:1.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dinko_korunic:hybserv2:1.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:dinko_korunic:hybserv2:1.9.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0304", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "wireshark", "product" : { "product_data" : [ { "product_name" : "wireshark", "version" : { "version_data" : [ { "version_value" : "0.9.15", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h", "name" : "http://anonsvn.wireshark.org/viewvc/trunk-1.2/epan/dissectors/packet-lwres.c?view=diff&r1=31596&r2=28492&diff_format=h", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036415.html", "name" : "FEDORA-2010-3556", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://osvdb.org/61987", "name" : "61987", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38257", "name" : "38257", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38348", "name" : "38348", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38829", "name" : "38829", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1983", "name" : "DSA-1983", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:031", "name" : "MDVSA-2010:031", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname", "name" : "http://www.metasploit.com/modules/exploit/multi/misc/wireshark_lwres_getaddrbyname", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/29/4", "name" : "[oss-security] 20100129 Re: CVE id request: Wireshark", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37985", "name" : "37985", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securitytracker.com/id?1023516", "name" : "1023516", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0239", "name" : "ADV-2010-0239", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.wireshark.org/security/wnpa-sec-2010-01.html", "name" : "http://www.wireshark.org/security/wnpa-sec-2010-01.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.wireshark.org/security/wnpa-sec-2010-02.html", "name" : "http://www.wireshark.org/security/wnpa-sec-2010-02.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55951", "name" : "wireshark-lwres-bo(55951)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8490", "name" : "oval:org.mitre.oval:def:8490", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9933", "name" : "oval:org.mitre.oval:def:9933", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the LWRES dissector in Wireshark 0.9.15 through 1.0.10 and 1.2.0 through 1.2.5 allow remote attackers to cause a denial of service (crash) via a malformed packet, as demonstrated using a stack-based buffer overflow to the dissect_getaddrsbyname_request function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:0.9.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:wireshark:wireshark:1.2.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0305", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "process-one", "product" : { "product_data" : [ { "product_name" : "ejabberd", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1_2", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38337", "name" : "38337", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39423", "name" : "39423", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2033", "name" : "DSA-2033", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/29/1", "name" : "[oss-security] 20100129 CVE Request -- ejabberd", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/29/5", "name" : "[oss-security] 20100129 Re: CVE Request -- ejabberd", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://www.osvdb.org/62066", "name" : "62066", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38003", "name" : "38003", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0894", "name" : "ADV-2010-0894", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56025", "name" : "ejabberd-client2server-dos(56025)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://support.process-one.net/browse/EJAB-1173", "name" : "https://support.process-one.net/browse/EJAB-1173", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ejabberd_c2s.erl in ejabberd before 2.1.3 allows remote attackers to cause a denial of service (daemon crash) via a large number of c2s (aka client2server) messages that trigger a queue overload." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.1_2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:process-one:ejabberd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.1.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0306", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kvm_qumranet", "product" : { "product_data" : [ { "product_name" : "kvm", "version" : { "version_data" : [ { "version_value" : "83", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38499", "name" : "38499", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38158", "name" : "38158", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=560654", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=560654", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10953", "name" : "oval:org.mitre.oval:def:10953", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0088.html", "name" : "RHSA-2010:0088", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html", "name" : "RHSA-2010:0095", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not use the Current Privilege Level (CPL) and I/O Privilege Level (IOPL) to restrict instruction execution, which allows guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch, a related issue to CVE-2010-0298." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kvm_qumranet:kvm:83:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-12T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0307", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "6.06", "version_affected" : "=" }, { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "9.04", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.4.37.6", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" }, { "version_value" : "2.6.32.4", "version_affected" : "=" }, { "version_value" : "2.6.32.5", "version_affected" : "=" }, { "version_value" : "2.6.32.6", "version_affected" : "=" }, { "version_value" : "2.6.32.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=221af7f87b97431e3ee21ce4b0e77d5411cf1549", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=221af7f87b97431e3ee21ce4b0e77d5411cf1549", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html", "name" : "FEDORA-2010-1787", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html", "name" : "SUSE-SA:2010:014", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?l=linux-mm&m=126466407724382&w=2", "name" : "[linux-mm] 20100128 DoS on x86_64", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://marc.info/?t=126466700200002&r=1&w=2", "name" : "http://marc.info/?t=126466700200002&r=1&w=2", "refsource" : "CONFIRM", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38779", "name" : "38779", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38922", "name" : "38922", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39649", "name" : "39649", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://support.avaya.com/css/P8/documents/100088287", "name" : "http://support.avaya.com/css/P8/documents/100088287", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of,20100202,15754.html", "name" : "http://www.globalsecuritymag.com/Vigil-nce-Linux-kernel-denial-of,20100202,15754.html", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:066", "name" : "MDVSA-2010:066", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/01/1", "name" : "[oss-security] 20100201 CVE request - kernel: DoS on x86_64", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/01/5", "name" : "[oss-security] 20100201 Re: CVE request - kernel: DoS on x86_64", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/04/1", "name" : "[oss-security] 20100203 Re: CVE request - kernel: DoS on x86_64", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/04/9", "name" : "[oss-security] 20100204 Re: CVE request - kernel: DoS on x86_64", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0398.html", "name" : "RHSA-2010:0398", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0771.html", "name" : "RHSA-2010:0771", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/38027", "name" : "38027", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.ubuntu.com/usn/USN-914-1", "name" : "USN-914-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0638", "name" : "ADV-2010-0638", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=560547", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=560547", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10870", "name" : "oval:org.mitre.oval:def:10870", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0146.html", "name" : "RHSA-2010:0146", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The load_elf_binary function in fs/binfmt_elf.c in the Linux kernel before 2.6.32.8 on the x86_64 platform does not ensure that the ELF interpreter is available before a call to the SET_PERSONALITY macro, which allows local users to cause a denial of service (system crash) via a 32-bit application that attempts to execute a 64-bit application and then triggers a segmentation fault, as demonstrated by amd64_killer, related to the flush_old_exec function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.32.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-17T18:30Z", "lastModifiedDate" : "2018-11-16T16:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0308", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "squid-cache", "product" : { "product_data" : [ { "product_name" : "squid", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "2.4", "version_affected" : "=" }, { "version_value" : "2.5", "version_affected" : "=" }, { "version_value" : "2.6", "version_affected" : "=" }, { "version_value" : "2.7", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.0.stable1", "version_affected" : "=" }, { "version_value" : "3.0.stable2", "version_affected" : "=" }, { "version_value" : "3.0.stable3", "version_affected" : "=" }, { "version_value" : "3.0.stable4", "version_affected" : "=" }, { "version_value" : "3.0.stable5", "version_affected" : "=" }, { "version_value" : "3.0.stable6", "version_affected" : "=" }, { "version_value" : "3.0.stable7", "version_affected" : "=" }, { "version_value" : "3.0.stable8", "version_affected" : "=" }, { "version_value" : "3.0.stable9", "version_affected" : "=" }, { "version_value" : "3.0.stable11", "version_affected" : "=" }, { "version_value" : "3.0.stable12", "version_affected" : "=" }, { "version_value" : "3.0.stable13", "version_affected" : "=" }, { "version_value" : "3.0.stable14", "version_affected" : "=" }, { "version_value" : "3.0.stable15", "version_affected" : "=" }, { "version_value" : "3.0.stable16", "version_affected" : "=" }, { "version_value" : "3.0.stable17", "version_affected" : "=" }, { "version_value" : "3.0.stable18", "version_affected" : "=" }, { "version_value" : "3.0.stable19", "version_affected" : "=" }, { "version_value" : "3.0.stable20", "version_affected" : "=" }, { "version_value" : "3.0.stable21", "version_affected" : "=" }, { "version_value" : "3.0.stable22", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0.2", "version_affected" : "=" }, { "version_value" : "3.1.0.3", "version_affected" : "=" }, { "version_value" : "3.1.0.4", "version_affected" : "=" }, { "version_value" : "3.1.0.5", "version_affected" : "=" }, { "version_value" : "3.1.0.6", "version_affected" : "=" }, { "version_value" : "3.1.0.7", "version_affected" : "=" }, { "version_value" : "3.1.0.8", "version_affected" : "=" }, { "version_value" : "3.1.0.9", "version_affected" : "=" }, { "version_value" : "3.1.0.10", "version_affected" : "=" }, { "version_value" : "3.1.0.11", "version_affected" : "=" }, { "version_value" : "3.1.0.12", "version_affected" : "=" }, { "version_value" : "3.1.0.13", "version_affected" : "=" }, { "version_value" : "3.1.0.14", "version_affected" : "=" }, { "version_value" : "3.1.0.15", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf", "name" : "http://events.ccc.de/congress/2009/Fahrplan/attachments/1483_26c3_ipv4_fuckups.pdf", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://osvdb.org/62044", "name" : "62044", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38451", "name" : "38451", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38455", "name" : "38455", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37522", "name" : "37522", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023520", "name" : "1023520", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Advisories/SQUID-2010_1.txt", "name" : "http://www.squid-cache.org/Advisories/SQUID-2010_1.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch", "name" : "http://www.squid-cache.org/Versions/v2/HEAD/changesets/12597.patch", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch", "name" : "http://www.squid-cache.org/Versions/v3/3.0/changesets/squid-3.0-9163.patch", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch", "name" : "http://www.squid-cache.org/Versions/v3/3.1/changesets/squid-3.1-9853.patch", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0260", "name" : "ADV-2010-0260", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56001", "name" : "squid-dns-dos(56001)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11270", "name" : "oval:org.mitre.oval:def:11270", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "lib/rfc1035.c in Squid 2.x, 3.0 through 3.0.STABLE22, and 3.1 through 3.1.0.15 allows remote attackers to cause a denial of service (assertion failure) via a crafted DNS packet that only contains a header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.0.stable22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:squid-cache:squid:3.1.0.15:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0309", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "kernel", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38922", "name" : "38922", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/kvm@vger.kernel.org/msg28002.html", "name" : "[kvm] 20100129 KVM: PIT: control word is write-only", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/02/1", "name" : "[oss-security] 20100202 CVE request - kvm: cat /dev/port in the guest can cause host DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/02/4", "name" : "[oss-security] 20100202 Re: CVE request - kvm: cat /dev/port in the guest can cause host DoS", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38158", "name" : "38158", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-914-1", "name" : "USN-914-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0638", "name" : "ADV-2010-0638", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=560887", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=560887", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11095", "name" : "oval:org.mitre.oval:def:11095", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0088.html", "name" : "RHSA-2010:0088", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0095.html", "name" : "RHSA-2010:0095", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The pit_ioport_read function in the Programmable Interval Timer (PIT) emulation in i8254.c in KVM 83 does not properly use the pit_state data structure, which allows guest OS users to cause a denial of service (host OS crash or hang) by attempting to read the /dev/port file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:linux:kernel:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-12T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0310", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38129", "name" : "38129", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023448", "name" : "1023448", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-143502-01-1", "name" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-143502-01-1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-275410-1", "name" : "275410", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37754", "name" : "37754", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8444", "name" : "oval:org.mitre.oval:def:8444", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10.0:*:sparc:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0311", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_identity_server", "version" : { "version_data" : [ { "version_value" : "8.1.0.5", "version_affected" : "=" }, { "version_value" : "8.1.0.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61658", "name" : "61658", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38130", "name" : "38130", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023447", "name" : "1023447", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141642-08-1", "name" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-141642-08-1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-275010-1", "name" : "275010", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37755", "name" : "37755", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0108", "name" : "ADV-2010-0108", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55572", "name" : "jsim-unspecified-security-bypass(55572)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Sun Java System Identity Manager (aka IdM) 8.1.0.5 and 8.1.0.6, when Sun Java System Access Manager, OpenSSO Enterprise 8.0, or IBM Tivoli Access Manager is used, allows remote attackers to obtain administrative access via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_identity_server:8.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_identity_server:8.1.0.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_access_manager_for_e-business:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:java_system_access_manager:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:sun:opensso_enterprise:8.0:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0312", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "tivoli_directory_server", "version" : { "version_data" : [ { "version_value" : "6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/tivoli-directory-server-62-doextendedop.html", "name" : "http://intevydis.blogspot.com/2010/01/tivoli-directory-server-62-doextendedop.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1023433", "name" : "1023433", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The do_extendedOp function in ibmslapd in IBM Tivoli Directory Server (TDS) 6.2 on Linux allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted SecureWay 3.2 Event Registration Request (aka a 1.3.18.0.2.12.1 request)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:tivoli_directory_server:6.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0313", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_directory_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-directory-server-70.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-directory-server-70.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/37978", "name" : "37978", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023431", "name" : "1023431", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37699", "name" : "37699", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0085", "name" : "ADV-2010-0085", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55511", "name" : "jsds-coregetproxyauthdn-dos(55511)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The core_get_proxyauth_dn function in ns-slapd in Sun Java System Directory Server Enterprise Edition 7.0 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a crafted LDAP Search Request message." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/476.html\r\n\r\n'CWE-476: NULL Pointer Dereference'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_directory_server:7.0:-:enterprise:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0314", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html", "name" : "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/41856", "name" : "41856", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:039", "name" : "MDVSA-2011:039", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-1006-1", "name" : "USN-1006-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2722", "name" : "ADV-2010-2722", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0552", "name" : "ADV-2011-0552", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple Safari allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2011-03-18T02:46Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0315", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "google", "product" : { "product_data" : [ { "product_name" : "chrome", "version" : { "version_data" : [ { "version_value" : "0.2.149.27", "version_affected" : "=" }, { "version_value" : "0.2.149.29", "version_affected" : "=" }, { "version_value" : "0.2.149.30", "version_affected" : "=" }, { "version_value" : "0.2.152.1", "version_affected" : "=" }, { "version_value" : "0.2.153.1", "version_affected" : "=" }, { "version_value" : "0.3.154.0", "version_affected" : "=" }, { "version_value" : "0.3.154.3", "version_affected" : "=" }, { "version_value" : "0.4.154.18", "version_affected" : "=" }, { "version_value" : "0.4.154.22", "version_affected" : "=" }, { "version_value" : "0.4.154.31", "version_affected" : "=" }, { "version_value" : "0.4.154.33", "version_affected" : "=" }, { "version_value" : "1.0.154.36", "version_affected" : "=" }, { "version_value" : "1.0.154.39", "version_affected" : "=" }, { "version_value" : "1.0.154.42", "version_affected" : "=" }, { "version_value" : "1.0.154.43", "version_affected" : "=" }, { "version_value" : "1.0.154.46", "version_affected" : "=" }, { "version_value" : "1.0.154.48", "version_affected" : "=" }, { "version_value" : "1.0.154.52", "version_affected" : "=" }, { "version_value" : "1.0.154.53", "version_affected" : "=" }, { "version_value" : "1.0.154.59", "version_affected" : "=" }, { "version_value" : "1.0.154.65", "version_affected" : "=" }, { "version_value" : "2.0.156.1", "version_affected" : "=" }, { "version_value" : "2.0.157.0", "version_affected" : "=" }, { "version_value" : "2.0.157.2", "version_affected" : "=" }, { "version_value" : "2.0.158.0", "version_affected" : "=" }, { "version_value" : "2.0.159.0", "version_affected" : "=" }, { "version_value" : "2.0.169.0", "version_affected" : "=" }, { "version_value" : "2.0.169.1", "version_affected" : "=" }, { "version_value" : "2.0.170.0", "version_affected" : "=" }, { "version_value" : "2.0.172", "version_affected" : "=" }, { "version_value" : "2.0.172.2", "version_affected" : "=" }, { "version_value" : "2.0.172.8", "version_affected" : "=" }, { "version_value" : "2.0.172.27", "version_affected" : "=" }, { "version_value" : "2.0.172.28", "version_affected" : "=" }, { "version_value" : "2.0.172.30", "version_affected" : "=" }, { "version_value" : "2.0.172.31", "version_affected" : "=" }, { "version_value" : "2.0.172.33", "version_affected" : "=" }, { "version_value" : "2.0.172.37", "version_affected" : "=" }, { "version_value" : "2.0.172.38", "version_affected" : "=" }, { "version_value" : "3.0.182.2", "version_affected" : "=" }, { "version_value" : "3.0.190.2", "version_affected" : "=" }, { "version_value" : "3.0.193.2", "version_affected" : "=" }, { "version_value" : "3.0.195.21", "version_affected" : "=" }, { "version_value" : "3.0.195.24", "version_affected" : "=" }, { "version_value" : "3.0.195.32", "version_affected" : "=" }, { "version_value" : "3.0.195.33", "version_affected" : "=" }, { "version_value" : "4.0.249.78", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://code.google.com/p/chromium/issues/detail?id=32309", "name" : "http://code.google.com/p/chromium/issues/detail?id=32309", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html", "name" : "http://googlechromereleases.blogspot.com/2010/02/stable-channel-update.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html", "name" : "SUSE-SR:2011:002", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html", "name" : "http://nomoreroot.blogspot.com/2010/01/little-bug-in-safari-and-google-chrome.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38545", "name" : "38545", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43068", "name" : "43068", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023583", "name" : "1023583", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs", "name" : "http://sites.google.com/a/chromium.org/dev/Home/chromium-security/chromium-security-bugs", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://trac.webkit.org/changeset/53607", "name" : "http://trac.webkit.org/changeset/53607", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38177", "name" : "38177", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0361", "name" : "ADV-2010-0361", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0212", "name" : "ADV-2011-0212", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugs.webkit.org/show_bug.cgi?id=33683", "name" : "https://bugs.webkit.org/show_bug.cgi?id=33683", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55683", "name" : "google-chrome-href-info-disclosure(55683)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56215", "name" : "googlechrome-iframe-info-disc(56215)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14452", "name" : "oval:org.mitre.oval:def:14452", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "WebKit before r53607, as used in Google Chrome before 4.0.249.89, allows remote attackers to discover a redirect's target URL, for the session of a specific user of a web site, by placing the site's URL in the HREF attribute of a stylesheet LINK element, and then reading the document.styleSheets[0].href property value, related to an IFRAME element." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.2.149.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.2.149.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.2.149.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.2.152.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.2.153.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.3.154.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.3.154.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.4.154.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.4.154.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.4.154.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:0.4.154.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:1.0.154.65:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.156.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.157.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.157.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.158.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.159.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.169.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.169.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.170.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:2.0.172.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.182.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.190.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.193.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.195.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.195.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.195.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:3.0.195.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.249.78" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-14T19:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0316", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "google", "product" : { "product_data" : [ { "product_name" : "google_sketchup", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.10247", "version_affected" : "=" }, { "version_value" : "7.1.4871", "version_affected" : "=" }, { "version_value" : "7.1.6087", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38187", "name" : "38187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303", "name" : "http://sketchup.google.com/support/bin/answer.py?hl=en&answer=141303", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0133", "name" : "ADV-2010-0133", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Google SketchUp before 7.1 M2 allows remote attackers to cause a denial of service (heap memory corruption) or possibly execute arbitrary code via a crafted SKP file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.0.10247:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.1.4871:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:google:google_sketchup:7.1.6087:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T17:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0317", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "novell", "product" : { "product_data" : [ { "product_name" : "netware", "version" : { "version_data" : [ { "version_value" : "6.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html", "name" : "http://protekresearch.blogspot.com/2010/01/prl-cifsnlm-memory-consumption-denial.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38114", "name" : "38114", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11009", "name" : "11009", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/archive/1/508731/100/0/threaded", "name" : "20100105 {PRL} Novell Netware CIFS And AFP Remote Memory Consumption DoS", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37616", "name" : "37616", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securitytracker.com/id?1023400", "name" : "1023400", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0041", "name" : "ADV-2010-0041", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55389", "name" : "netware-afptcp-dos(55389)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Novell Netware 6.5 SP8 allows remote attackers to cause a denial of service (NULL pointer dereference, memory consumption, ABEND, and crash) via a large number of malformed or AFP requests that are not properly handled by (1) the CIFS functionality in CIFS.nlm Semantic Agent (Build 163 MP) 3.27 or (2) the AFP functionality in AFPTCP.nlm Build 163 SP 3.27. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:novell:netware:6.5:sp8:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0318", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebsd", "product" : { "product_data" : [ { "product_name" : "freebsd", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "8.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38124", "name" : "38124", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.FreeBSD.org/advisories/FreeBSD-SA-10:03.zfs.asc", "name" : "FreeBSD-SA-10:03", "refsource" : "FREEBSD", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37657", "name" : "37657", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023407", "name" : "1023407", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The replay functionality for ZFS Intent Log (ZIL) in FreeBSD 7.1, 7.2, and 8.0, when creating files during replay of a setattr transaction, uses 7777 permissions instead of the original permissions, which might allow local users to read or modify unauthorized files in opportunistic circumstances after a system crash or power failure." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T18:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0319", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "docmint", "product" : { "product_data" : [ { "product_name" : "docmint", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/docmintcms-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/docmintcms-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38149", "name" : "38149", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11119", "name" : "11119", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37721", "name" : "37721", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55549", "name" : "docmint-index-xss(55549)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in index.php in Docmint 1.0 and 2.1 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:docmint:docmint:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:docmint:docmint:2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0320", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "x10media", "product" : { "product_data" : [ { "product_name" : "glitter_central_script", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/glittercentral-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/glittercentral-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38146", "name" : "38146", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11108", "name" : "11108", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/61632", "name" : "61632", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55537", "name" : "glittercentral-submitlink-xss(55537)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in submitlink.php in Glitter Central Script allows remote attackers to inject arbitrary web script or HTML via the catid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:x10media:glitter_central_script:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0321", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jamit", "product" : { "product_data" : [ { "product_name" : "jamit_job_board", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/jamitjobboard-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/jamitjobboard-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/32797", "name" : "32797", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11073", "name" : "11073", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37701", "name" : "37701", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55500", "name" : "jamit-jobboard-index-xss(55500)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in jobs/index.php in Jamit Job Board 3.0 allows remote attackers to inject arbitrary web script or HTML via the post_id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jamit:jamit_job_board:3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0322", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matthias_karr", "product" : { "product_data" : [ { "product_name" : "mk_anydropdownmenu", "version" : { "version_data" : [ { "version_value" : "0.3.10", "version_affected" : "=" }, { "version_value" : "0.3.12", "version_affected" : "=" }, { "version_value" : "0.3.13", "version_affected" : "=" }, { "version_value" : "0.3.23", "version_affected" : "=" }, { "version_value" : "0.3.25", "version_affected" : "=" }, { "version_value" : "0.3.26", "version_affected" : "=" }, { "version_value" : "0.3.27", "version_affected" : "=" }, { "version_value" : "0.3.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/", "name" : "http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/info/ChangeLog/", "name" : "http://typo3.org/extensions/repository/view/mk_anydropdownmenu/0.4.0/info/ChangeLog/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the init function in MK-AnydropdownMenu (mk_anydropdownmenu) extension 0.3.28 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:0.3.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_karr:mk_anydropdownmenu:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.28" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T14:02Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0323", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arco_van_geest", "product" : { "product_data" : [ { "product_name" : "goof_fotoboek", "version" : { "version_data" : [ { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.7.10", "version_affected" : "=" }, { "version_value" : "1.7.11", "version_affected" : "=" }, { "version_value" : "1.7.12", "version_affected" : "=" }, { "version_value" : "1.7.13", "version_affected" : "=" }, { "version_value" : "1.7.14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/", "name" : "http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.14" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0324", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "patrick_bauerochse", "product" : { "product_data" : [ { "product_name" : "ref_list", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/ref_list/1.0.2/", "name" : "http://typo3.org/extensions/repository/view/ref_list/1.0.2/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Customer Reference List (ref_list) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:patrick_bauerochse:ref_list:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0325", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sebastian_baumann", "product" : { "product_data" : [ { "product_name" : "sb_folderdownload", "version" : { "version_data" : [ { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/sb_folderdownload/0.2.3/", "name" : "http://typo3.org/extensions/repository/view/sb_folderdownload/0.2.3/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the SB Folderdownload (sb_folderdownload) extension 0.2.2 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sebastian_baumann:sb_folderdownload:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sebastian_baumann:sb_folderdownload:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sebastian_baumann:sb_folderdownload:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sebastian_baumann:sb_folderdownload:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.2" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0326", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francois_suter", "product" : { "product_data" : [ { "product_name" : "devlog", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.7.0", "version_affected" : "=" }, { "version_value" : "2.8.0", "version_affected" : "=" }, { "version_value" : "2.9.0", "version_affected" : "=" }, { "version_value" : "2.9.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "rene_fritz", "product" : { "product_data" : [ { "product_name" : "devlog", "version" : { "version_data" : [ { "version_value" : "1.1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38164", "name" : "38164", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://typo3.org/extensions/repository/view/devlog/2.9.2/", "name" : "http://typo3.org/extensions/repository/view/devlog/2.9.2/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Developer log (devlog) extension 2.9.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.8.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:2.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francois_suter:devlog:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.9.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rene_fritz:devlog:1.1.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0327", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "julian_kleinhans", "product" : { "product_data" : [ { "product_name" : "kj_imagelightbox2", "version" : { "version_data" : [ { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38165", "name" : "38165", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/", "name" : "http://typo3.org/extensions/repository/view/kj_imagelightbox2/2.0.2/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the KJ: Imagelightbox (kj_imagelightbox2) extension 2.0.0 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2008-2490." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:julian_kleinhans:kj_imagelightbox2:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:julian_kleinhans:kj_imagelightbox2:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:julian_kleinhans:kj_imagelightbox2:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:julian_kleinhans:kj_imagelightbox2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.0.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T15:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0328", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "rastislav_birka", "product" : { "product_data" : [ { "product_name" : "cs2_unitconv", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38166", "name" : "38166", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://typo3.org/extensions/repository/view/cs2_unitconv/1.0.5/", "name" : "http://typo3.org/extensions/repository/view/cs2_unitconv/1.0.5/", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Unit Converter (cs2_unitconv) extension 1.0.4 for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:rastislav_birka:cs2_unitconv:1.0.4:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0329", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "alex_kellner", "product" : { "product_data" : [ { "product_name" : "powermail", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "=" }, { "version_value" : "1.0.7", "version_affected" : "=" }, { "version_value" : "1.0.8", "version_affected" : "=" }, { "version_value" : "1.0.9", "version_affected" : "=" }, { "version_value" : "1.0.10", "version_affected" : "=" }, { "version_value" : "1.0.11", "version_affected" : "=" }, { "version_value" : "1.0.12", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.3.12", "version_affected" : "=" }, { "version_value" : "1.3.13", "version_affected" : "=" }, { "version_value" : "1.3.14", "version_affected" : "=" }, { "version_value" : "1.3.15", "version_affected" : "=" }, { "version_value" : "1.3.16", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.5", "version_affected" : "=" }, { "version_value" : "1.4.6", "version_affected" : "=" }, { "version_value" : "1.4.7", "version_affected" : "=" }, { "version_value" : "1.4.8", "version_affected" : "=" }, { "version_value" : "1.4.9", "version_affected" : "=" }, { "version_value" : "1.4.10", "version_affected" : "=" }, { "version_value" : "1.4.11", "version_affected" : "=" }, { "version_value" : "1.4.12", "version_affected" : "=" }, { "version_value" : "1.4.13", "version_affected" : "=" }, { "version_value" : "1.4.14", "version_affected" : "=" }, { "version_value" : "1.4.15", "version_affected" : "=" }, { "version_value" : "1.4.16", "version_affected" : "=" }, { "version_value" : "1.4.17", "version_affected" : "=" }, { "version_value" : "1.4.18", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38167", "name" : "38167", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://typo3.org/extensions/repository/view/powermail/1.5.2/", "name" : "http://typo3.org/extensions/repository/view/powermail/1.5.2/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/", "name" : "http://typo3.org/extensions/repository/view/powermail/1.5.2/info/changelog.txt/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the powermail extension 1.5.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors related to the \"SQL selection field\" and \"typoscript.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.3.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.4.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:alex_kellner:powermail:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0330", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "julian_fries", "product" : { "product_data" : [ { "product_name" : "jf_easymaps", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/jf_easymaps/1.0.3/", "name" : "http://typo3.org/extensions/repository/view/jf_easymaps/1.0.3/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Googlemaps for tt_news (jf_easymaps) extension 1.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:julian_fries:jf_easymaps:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0331", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stefan_tannhaeuser", "product" : { "product_data" : [ { "product_name" : "tv21_talkshow", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_tannhaeuser:tv21_talkshow:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0332", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "stefan_tannhaeuser", "product" : { "product_data" : [ { "product_name" : "tv21_talkshow", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the TV21 Talkshow (tv21_talkshow) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:stefan_tannhaeuser:tv21_talkshow:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-08-08T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0333", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "matthias_graubner", "product" : { "product_data" : [ { "product_name" : "mg_help", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.1.0", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Helpdesk (mg_help) extension 1.1.6 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:0.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:matthias_graubner:mg_help:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.6" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-07-26T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0334", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francisco_cifuentes", "product" : { "product_data" : [ { "product_name" : "vote_for_tt_news", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_cifuentes:vote_for_tt_news:1.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-07-25T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0335", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "francisco_cifuentes", "product" : { "product_data" : [ { "product_name" : "vote_for_tt_news", "version" : { "version_data" : [ { "version_value" : "1.0.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Vote rank for news (vote_for_tt_news) extension 1.0.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:francisco_cifuentes:vote_for_tt_news:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-07-26T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0336", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "kiddog_mysqldumper", "version" : { "version_data" : [ { "version_value" : "0.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in the kiddog_mysqldumper (kiddog_mysqldumper) extension 0.0.3 and earlier for TYPO3 allows remote attackers to obtain sensitive information via unknown attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:kiddog_mysqldumper:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0337", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "dl3_tt_news_alerts", "version" : { "version_data" : [ { "version_value" : "0.2.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the tt_news Mail alert (dl3_tt_news_alerts) extension 0.2.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:dl3_tt_news_alerts:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0338", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "ttpedit", "version" : { "version_data" : [ { "version_value" : "0.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the TT_Products editor (ttpedit) extension 0.0.2 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:ttpedit:0.0.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-02-01T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0339", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "vm19_userlinks", "version" : { "version_data" : [ { "version_value" : "0.1.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the User Links (vm19_userlinks) extension 0.1.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:vm19_userlinks:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.1.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0340", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "mjseventpro", "version" : { "version_data" : [ { "version_value" : "0.2.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the MJS Event Pro (mjseventpro) extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:mjseventpro:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.2.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0341", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "bb_simplejobs", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the BB Simple Jobs (bb_simplejobs) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:bb_simplejobs:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.1.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0342", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "job_reports", "version" : { "version_data" : [ { "version_value" : "0.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Reports for Job (job_reports) extension 0.1.0 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:job_reports:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.1.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0343", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "pb_clanlist", "version" : { "version_data" : [ { "version_value" : "0.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Clan Users List (pb_clanlist) extension 0.0.1 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:pb_clanlist:0.0.1:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0344", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "zak_store_management", "version" : { "version_data" : [ { "version_value" : "1.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the zak_store_management extension 1.0.0 and earlier TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:zak_store_management:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0345", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "majordomo", "version" : { "version_data" : [ { "version_value" : "1.1.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Majordomo extension 1.1.3 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:majordomo:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.1.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2010-01-18T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0346", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "mimi_tipfriends", "version" : { "version_data" : [ { "version_value" : "0.0.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Tip many friends (mimi_tipfriends) extension 0.0.2 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:mimi_tipfriends:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.0.2" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0347", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "typo3", "product" : { "product_data" : [ { "product_name" : "vd_gemomap", "version" : { "version_data" : [ { "version_value" : "0.3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the VD / Geomap (vd_geomap) extension 0.3.1 and earlier for TYPO3 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:typo3:vd_gemomap:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.1" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0348", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "c-3.co.jp", "product" : { "product_data" : [ { "product_name" : "webcalenderc3", "version" : { "version_data" : [ { "version_value" : "0.31", "version_affected" : "=" }, { "version_value" : "0.32", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jvn.jp/en/jp/JVN22247093/index.html", "name" : "JVN#22247093", "refsource" : "JVN", "tags" : [ ] }, { "url" : "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000003.html", "name" : "JVNDB-2010-000003", "refsource" : "JVNDB", "tags" : [ ] }, { "url" : "http://osvdb.org/61630", "name" : "61630", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38135", "name" : "38135", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://webcal.c-3.jp/zeijakusei.html", "name" : "http://webcal.c-3.jp/zeijakusei.html", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to read arbitrary files via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.32" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T19:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0349", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "c-3.co.jp", "product" : { "product_data" : [ { "product_name" : "webcalenderc3", "version" : { "version_data" : [ { "version_value" : "0.31", "version_affected" : "=" }, { "version_value" : "0.32", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jvn.jp/en/jp/JVN33977065/index.html", "name" : "JVN#33977065", "refsource" : "JVN", "tags" : [ ] }, { "url" : "http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000002.html", "name" : "JVNDB-2010-000002", "refsource" : "JVNDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38135", "name" : "38135", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://webcal.c-3.jp/zeijakusei.html", "name" : "http://webcal.c-3.jp/zeijakusei.html", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/61629", "name" : "61629", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in C3 Corp. WebCalenderC3 0.32 and earlier allows remote attackers to inject arbitrary web script or HTML via unknown vectors. NOTE: this issue could not be reproduced by the vendor, but a patch was provided anyway. The original researcher is reliable." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:0.31:s2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:c-3.co.jp:webcalenderc3:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.32" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-15T20:30Z", "lastModifiedDate" : "2011-04-29T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0350", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "arco_van_geest", "product" : { "product_data" : [ { "product_name" : "goof_fotoboek", "version" : { "version_data" : [ { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.4", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.3", "version_affected" : "=" }, { "version_value" : "1.7.4", "version_affected" : "=" }, { "version_value" : "1.7.5", "version_affected" : "=" }, { "version_value" : "1.7.7", "version_affected" : "=" }, { "version_value" : "1.7.9", "version_affected" : "=" }, { "version_value" : "1.7.10", "version_affected" : "=" }, { "version_value" : "1.7.11", "version_affected" : "=" }, { "version_value" : "1.7.12", "version_affected" : "=" }, { "version_value" : "1.7.13", "version_affected" : "=" }, { "version_value" : "1.7.14", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/", "name" : "http://typo3.org/extensions/repository/view/goof_fotoboek/1.7.15/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "name" : "http://typo3.org/teams/security/security-bulletins/typo3-sa-2009-021/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the Photo Book (goof_fotoboek) extension 1.7.14 and earlier for TYPO3 has unknown impact and remote attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:1.7.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:arco_van_geest:goof_fotoboek:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.14" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:typo3:typo3:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-15T20:30Z", "lastModifiedDate" : "2011-05-02T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0356", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "viscomsoft", "product" : { "product_data" : [ { "product_name" : "movie_player_pro_sdk_activex", "version" : { "version_data" : [ { "version_value" : "6.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38156", "name" : "38156", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt", "name" : "http://www.shinnai.net/exploits/X6hU4E0E7P5H3qH5yXrn.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0093", "name" : "ADV-2010-0093", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55536", "name" : "movieplayer-drawtext-activex-bo(55536)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the MOVIEPLAYER.MoviePlayerCtrl.1 ActiveX control in MoviePlayer.ocx 6.8.0.0 in Viscom Software Movie Player Pro SDK ActiveX 6.8 allows remote attackers to execute arbitrary code via a long strFontName parameter to the DrawText method." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:viscomsoft:movie_player_pro_sdk_activex:6.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-18T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0357", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_web_content_management", "version" : { "version_data" : [ { "version_value" : "6.0.1.4", "version_affected" : "=" }, { "version_value" : "6.0.1.5", "version_affected" : "=" }, { "version_value" : "6.0.1.6", "version_affected" : "=" }, { "version_value" : "6.1.0.1", "version_affected" : "=" }, { "version_value" : "6.1.0.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38174", "name" : "38174", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023463", "name" : "1023463", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/61711", "name" : "61711", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37825", "name" : "37825", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0149", "name" : "ADV-2010-0149", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM02704", "name" : "PM02704", "refsource" : "AIXAPAR", "tags" : [ "Patch" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM03233", "name" : "PM03233", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM04647", "name" : "PM04647", "refsource" : "AIXAPAR", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55663", "name" : "lotusweb-login-xss(55663)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Login page in IBM Lotus Web Content Management (WCM) 6.0.1.4, 6.0.1.5, and 6.0.1.6 before iFix 32; and 6.1.0.1 and 6.1.0.2 before iFix 24; for WebSphere Portal allows remote attackers to inject arbitrary web script or HTML via unspecified parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_web_content_management:6.0.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_web_content_management:6.1.0.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0358", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "lotus_domino", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "8.5.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/lotus-domino-7-probably-8-ldap-heap.html", "name" : "http://intevydis.blogspot.com/2010/01/lotus-domino-7-probably-8-ldap-heap.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://intevydis.com/vd-list.shtml", "name" : "http://intevydis.com/vd-list.shtml", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023456", "name" : "1023456", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in the server in IBM Lotus Domino 7 and 8.5 FP1 allows remote attackers to cause a denial of service (daemon exit) and possibly have unspecified other impact via a long string in a crafted LDAP message to a TCP port, a different vulnerability than CVE-2009-3087." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:lotus_domino:8.5.0.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2011-04-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0359", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeus", "product" : { "product_data" : [ { "product_name" : "zeus_web_server", "version" : { "version_data" : [ { "version_value" : "4.3r5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/zeus-web-server-ssl2clienthello.html", "name" : "http://intevydis.blogspot.com/2010/01/zeus-web-server-ssl2clienthello.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://intevydis.com/vd-list.shtml", "name" : "http://intevydis.com/vd-list.shtml", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38056", "name" : "38056", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023465", "name" : "1023465", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "name" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released", "name" : "http://support.zeus.com/zws/news/2010/01/13/zws_4_3r5_released", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.osvdb.org/61699", "name" : "61699", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37829", "name" : "37829", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0147", "name" : "ADV-2010-0147", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the SSLv2 support in Zeus Web Server before 4.3r5 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via a long string in an invalid Client Hello message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.3r5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2010-01-21T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0360", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-trace.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://intevydis.com/vd-list.shtml", "name" : "http://intevydis.com/vd-list.shtml", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an \"overflow.\" NOTE: this might overlap CVE-2010-0272 and CVE-2010-0273." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2011-04-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0361", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-webdav.html", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2011-04-28T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0362", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeus", "product" : { "product_data" : [ { "product_name" : "zeus_web_server", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.1", "version_affected" : "=" }, { "version_value" : "3.3.2", "version_affected" : "=" }, { "version_value" : "3.3.3", "version_affected" : "=" }, { "version_value" : "3.3.4", "version_affected" : "=" }, { "version_value" : "3.3.5", "version_affected" : "=" }, { "version_value" : "3.3.6", "version_affected" : "=" }, { "version_value" : "3.3.7", "version_affected" : "=" }, { "version_value" : "3.3.8", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "name" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Zeus Web Server before 4.3r5 does not use random transaction IDs for DNS requests, which makes it easier for remote attackers to spoof DNS responses." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.1:r1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.2:r2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.3:r3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:*:r4:*:*:*:*:*:*", "versionEndIncluding" : "4.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2011-05-06T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0363", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "zeus", "product" : { "product_data" : [ { "product_name" : "zeus_web_server", "version" : { "version_data" : [ { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "4.1", "version_affected" : "=" }, { "version_value" : "4.1r1", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2r2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.3r3", "version_affected" : "=" }, { "version_value" : "4.3r4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "name" : "http://support.zeus.com/zws/media/docs/4.3/RELEASE_NOTES", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in Zeus Web Server before 4.3r5, when SSL is enabled for the admin server, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2002-1785." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.1r1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.2r2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:4.3r3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:zeus:zeus_web_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.3r4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-20T16:30Z", "lastModifiedDate" : "2010-02-02T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0364", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "videolan", "product" : { "product_data" : [ { "product_name" : "vlc_media_player", "version" : { "version_data" : [ { "version_value" : "0.8.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.exploit-db.com/exploits/11174", "name" : "11174", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37832", "name" : "37832", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55717", "name" : "vlcmediaplayer-asas-bo(55717)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14342", "name" : "oval:org.mitre.oval:def:14342", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in VideoLAN VLC Media Player 0.8.6 allows user-assisted remote attackers to execute arbitrary code via an ogg file with a crafted Advanced SubStation Alpha Subtitle (.ass) file, probably involving the Dialogue field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:videolan:vlc_media_player:0.8.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T20:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0365", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitscripts", "product" : { "product_data" : [ { "product_name" : "bits_video_script", "version" : { "version_data" : [ { "version_value" : "2.04", "version_affected" : "=" }, { "version_value" : "2.05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61827", "name" : "61827", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38252", "name" : "38252", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "name" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55739", "name" : "bitsvideo-search-xss(55739)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in search.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allows remote attackers to inject arbitrary web script or HTML via the order parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.05:gold_beta:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0366", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitscripts", "product" : { "product_data" : [ { "product_name" : "bits_video_script", "version" : { "version_data" : [ { "version_value" : "2.04", "version_affected" : "=" }, { "version_value" : "2.05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61826", "name" : "61826", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38252", "name" : "38252", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "name" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55738", "name" : "bitsvideo-addvideo-file-upload(55738)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple unrestricted file upload vulnerabilities in (1) register.php and (2) addvideo.php in BitScripts Bits Video Script 2.04 and 2.05 Gold Beta allow remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.05:gold_beta:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0367", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bitscripts", "product" : { "product_data" : [ { "product_name" : "bits_video_script", "version" : { "version_data" : [ { "version_value" : "2.04", "version_affected" : "=" }, { "version_value" : "2.05", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "name" : "http://www.packetstormsecurity.com/1001-exploits/bitsvs-xssuploadrfi.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55740", "name" : "bitsvideo-showcasesearch-file-include(55740)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptem[template] parameter to (1) showcasesearch.php and (2) showcase2search.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bitscripts:bits_video_script:2.05:gold_beta:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T20:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0370", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "roger_lopez", "product" : { "product_data" : [ { "product_name" : "nodeblock", "version" : { "version_data" : [ { "version_value" : "5.x-1.1", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "thomas_turnbull", "product" : { "product_data" : [ { "product_name" : "nodeblock", "version" : { "version_data" : [ { "version_value" : "6.x-1.0", "version_affected" : "=" }, { "version_value" : "6.x-1.1", "version_affected" : "=" }, { "version_value" : "6.x-1.2", "version_affected" : "=" }, { "version_value" : "6.x-1.3", "version_affected" : "<=" }, { "version_value" : "6.x-1.x", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://drupal.org/node/683584", "name" : "http://drupal.org/node/683584", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/683586", "name" : "http://drupal.org/node/683586", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://drupal.org/node/683598", "name" : "http://drupal.org/node/683598", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://packetstormsecurity.org/1001-exploits/drupalnb-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/drupalnb-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38186", "name" : "38186", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/61682", "name" : "61682", "refsource" : "OSVDB", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/archive/1/508933/100/0/threaded", "name" : "20100114 XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37782", "name" : "37782", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55606", "name" : "nodeblocks-titles-xss(55606)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Node Blocks module 5.x-1.1 and earlier, and 6.x-1.3 and earlier, a module for Drupal, allows remote authenticated users, with permissions to create or edit content and administer blocks, to inject arbitrary web script or HTML via the edit-title parameter (aka block title)." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roger_lopez:nodeblock:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.x-1.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_turnbull:nodeblock:6.x-1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_turnbull:nodeblock:6.x-1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_turnbull:nodeblock:6.x-1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_turnbull:nodeblock:*:*:*:*:*:*:*:*", "versionEndIncluding" : "6.x-1.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thomas_turnbull:nodeblock:6.x-1.x:dev:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0371", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hitmaaan", "product" : { "product_data" : [ { "product_name" : "hitmaaan_gallery", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61801", "name" : "61801", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/galleriehitmaaan-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38234", "name" : "38234", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55704", "name" : "hitmaan-index-xss(55704)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in index.php in Hitmaaan Gallery 1.3 allow remote attackers to inject arbitrary web script or HTML via the (1) gall and (2) levela parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hitmaaan:hitmaaan_gallery:1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0372", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hong_chuyen", "product" : { "product_data" : [ { "product_name" : "com_articlemanager", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlaarticlemanager-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlaarticlemanager-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11140", "name" : "11140", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37799", "name" : "37799", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55664", "name" : "articlemanager-index-sql-injection(55664)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Articlemanager (com_articlemanager) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the artid parameter in a display action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hong_chuyen:com_articlemanager:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0373", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "joomla", "product" : { "product_data" : [ { "product_name" : "com_libros", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlalibros-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlalibros-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11178", "name" : "11178", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55696", "name" : "libros-index-sql-injection(55696)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the libros (com_libros) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a detail action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joomla:com_libros:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0374", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "codingfish", "product" : { "product_data" : [ { "product_name" : "com_marketplace", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.packetstormsecurity.com/1001-exploits/joomlamarketplace-xss.txt", "name" : "http://www.packetstormsecurity.com/1001-exploits/joomlamarketplace-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37819", "name" : "37819", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55662", "name" : "marketplace-index-xss(55662)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the Marketplace (com_marketplace) component 1.2 for Joomla! allows remote attackers to inject arbitrary web script or HTML via the catid parameter in a show_category action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:codingfish:com_marketplace:1.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0375", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jce-tech", "product" : { "product_data" : [ { "product_name" : "php_calendars_script", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38036", "name" : "38036", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11082", "name" : "11082", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.osvdb.org/61617", "name" : "61617", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40757", "name" : "40757", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55518", "name" : "phpcalendars-productlist-sql-injection(55518)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to execute arbitrary SQL commands via the cat parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jce-tech:php_calendars_script:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0376", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jce-tech", "product" : { "product_data" : [ { "product_name" : "php_calendars_script", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38036", "name" : "38036", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11082", "name" : "11082", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/40391", "name" : "40391", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55517", "name" : "phpcalendars-productlist-xss(55517)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in product_list.php in JCE-Tech PHP Calendars, downloaded 2010-01-11, allows remote attackers to inject arbitrary web script or HTML via the cat parameter. NOTE: this issue is reportedly resultant from a forced SQL error message that occurs from exploitation of CVE-2010-0375." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jce-tech:php_calendars_script:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0377", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyspace", "product" : { "product_data" : [ { "product_name" : "phpmyspace", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/phpmyspace-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38245", "name" : "38245", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a play_game action. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyspace:phpmyspace:8.0:*:gold:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyspace:phpmyspace:8.10:*:gold:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-21T22:30Z", "lastModifiedDate" : "2010-01-22T18:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0378", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "6.0.79", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/27105", "name" : "27105", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/secunia_research/2007-77/", "name" : "http://secunia.com/secunia_research/2007-77/", "refsource" : "MISC", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023435", "name" : "1023435", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/204889", "name" : "VU#204889", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/979267.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/979267.mspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7580", "name" : "oval:org.mitre.oval:def:7580", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Adobe Flash Player 6.0.79, as distributed in Microsoft Windows XP SP2 and SP3, allows remote attackers to execute arbitrary code by unloading a Flash object that is currently being accessed by a script, leading to memory corruption, aka a \"Movie Unloading Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/416.html\r\n\r\nCWE-416 Use-After Free Vulnerability" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/advisory/979267.mspx\r\n\r\n\"\t\r\nSuggested Actions\r\n\r\nPerform one or both of the following steps:\r\n•\t\r\n\r\nUninstall the Adobe Flash Player version 6.\r\n•\t\r\n\r\nInstall the most current version of Flash Player available from Adobe.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T23:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0379", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "adobe", "product" : { "product_data" : [ { "product_name" : "flash_player", "version" : { "version_data" : [ { "version_value" : "6.0.21.0", "version_affected" : "=" }, { "version_value" : "6.0.79", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/27105", "name" : "27105", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023435", "name" : "1023435", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/979267.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/979267.mspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14146", "name" : "oval:org.mitre.oval:def:14146", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple unspecified vulnerabilities in the Macromedia Flash ActiveX control in Adobe Flash Player 6, as distributed in Microsoft Windows XP SP2 and SP3, might allow remote attackers to execute arbitrary code via unspecified vectors that are not related to the use-after-free \"Movie Unloading Vulnerability\" (CVE-2010-0378). NOTE: due to lack of details, it is not clear whether this overlaps any other CVE item." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.21.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:adobe:flash_player:6.0.79:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-21T23:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0380", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "jce-tech", "product" : { "product_data" : [ { "product_name" : "php_calendars_script", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" }, { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/phpcalendars-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11082", "name" : "11082", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "install.php in JCE-Tech PHP Calendars, downloaded 20100121, allows remote attackers to bypass intended access restrictions and modify application settings via a direct request. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's installation documentation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:jce-tech:php_calendars_script:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2010-01-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0381", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpmyspace", "product" : { "product_data" : [ { "product_name" : "phpmyspace", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38245", "name" : "38245", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in modules/arcade/index.php in PHP MySpace Gold Edition 8.0 and 8.10 allows remote attackers to execute arbitrary SQL commands via the gid parameter in a show_stats action. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyspace:phpmyspace:8.0:*:gold:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpmyspace:phpmyspace:8.10:*:gold:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2010-01-25T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0382", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "isc", "product" : { "product_data" : [ { "product_name" : "bind", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.1.0", "version_affected" : "=" }, { "version_value" : "9.1.1", "version_affected" : "=" }, { "version_value" : "9.1.2", "version_affected" : "=" }, { "version_value" : "9.1.3", "version_affected" : "=" }, { "version_value" : "9.2", "version_affected" : "=" }, { "version_value" : "9.2.0", "version_affected" : "=" }, { "version_value" : "9.2.1", "version_affected" : "=" }, { "version_value" : "9.2.2", "version_affected" : "=" }, { "version_value" : "9.2.3", "version_affected" : "=" }, { "version_value" : "9.2.4", "version_affected" : "=" }, { "version_value" : "9.2.5", "version_affected" : "=" }, { "version_value" : "9.2.6", "version_affected" : "=" }, { "version_value" : "9.2.7", "version_affected" : "=" }, { "version_value" : "9.2.8", "version_affected" : "=" }, { "version_value" : "9.2.9", "version_affected" : "=" }, { "version_value" : "9.3", "version_affected" : "=" }, { "version_value" : "9.3.0", "version_affected" : "=" }, { "version_value" : "9.3.1", "version_affected" : "=" }, { "version_value" : "9.3.2", "version_affected" : "=" }, { "version_value" : "9.3.3", "version_affected" : "=" }, { "version_value" : "9.3.4", "version_affected" : "=" }, { "version_value" : "9.3.5", "version_affected" : "=" }, { "version_value" : "9.3.6", "version_affected" : "=" }, { "version_value" : "9.4", "version_affected" : "=" }, { "version_value" : "9.4.0", "version_affected" : "=" }, { "version_value" : "9.4.1", "version_affected" : "=" }, { "version_value" : "9.4.2", "version_affected" : "=" }, { "version_value" : "9.4.3", "version_affected" : "=" }, { "version_value" : "9.6.0", "version_affected" : "=" }, { "version_value" : "9.6.1", "version_affected" : "=" }, { "version_value" : "9.7.0", "version_affected" : "=" }, { "version_value" : "9.10.0", "version_affected" : "=" }, { "version_value" : "9.10.1", "version_affected" : "=" }, { "version_value" : "9.10.2", "version_affected" : "=" }, { "version_value" : "9.10.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/40086", "name" : "40086", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "name" : "http://wiki.rpath.com/wiki/Advisories:rPSA-2010-0018", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2054", "name" : "DSA-2054", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0622", "name" : "ADV-2010-0622", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1352", "name" : "ADV-2010-1352", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11753", "name" : "oval:org.mitre.oval:def:11753", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6665", "name" : "oval:org.mitre.oval:def:6665", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7086", "name" : "oval:org.mitre.oval:def:7086", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.isc.org/advisories/CVE-2009-4022v6", "name" : "https://www.isc.org/advisories/CVE-2009-4022v6", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ISC BIND 9.0.x through 9.3.x, 9.4 before 9.4.3-P5, 9.5 before 9.5.2-P2, 9.6 before 9.6.1-P3, and 9.7.0 beta handles out-of-bailiwick data accompanying a secure response without re-fetching from the original source, which allows remote attackers to have an unspecified impact via a crafted response, aka Bug 20819. NOTE: this vulnerability exists because of a regression during the fix for CVE-2009-4022." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.0.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.1:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.1.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.0:rc9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.3:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.4:rc8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.7:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.2.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.5:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.3.6:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:a6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:b4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:b3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:p5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.4.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.7.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:a1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:a2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:p4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:p3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:isc:bind:9.10.3:rc1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-22T22:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0383", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tor", "product" : { "product_data" : [ { "product_name" : "tor", "version" : { "version_data" : [ { "version_value" : "0.0.2", "version_affected" : "=" }, { "version_value" : "0.0.2_pre13", "version_affected" : "=" }, { "version_value" : "0.0.2_pre14", "version_affected" : "=" }, { "version_value" : "0.0.2_pre15", "version_affected" : "=" }, { "version_value" : "0.0.2_pre16", "version_affected" : "=" }, { "version_value" : "0.0.2_pre17", "version_affected" : "=" }, { "version_value" : "0.0.2_pre18", "version_affected" : "=" }, { "version_value" : "0.0.2_pre19", "version_affected" : "=" }, { "version_value" : "0.0.2_pre20", "version_affected" : "=" }, { "version_value" : "0.0.2_pre21", "version_affected" : "=" }, { "version_value" : "0.0.2_pre22", "version_affected" : "=" }, { "version_value" : "0.0.2_pre23", "version_affected" : "=" }, { "version_value" : "0.0.2_pre24", "version_affected" : "=" }, { "version_value" : "0.0.2_pre25", "version_affected" : "=" }, { "version_value" : "0.0.2_pre26", "version_affected" : "=" }, { "version_value" : "0.0.2_pre27", "version_affected" : "=" }, { "version_value" : "0.0.3", "version_affected" : "=" }, { "version_value" : "0.0.4", "version_affected" : "=" }, { "version_value" : "0.0.5", "version_affected" : "=" }, { "version_value" : "0.0.6", "version_affected" : "=" }, { "version_value" : "0.0.6.1", "version_affected" : "=" }, { "version_value" : "0.0.6.2", "version_affected" : "=" }, { "version_value" : "0.0.7", "version_affected" : "=" }, { "version_value" : "0.0.7.1", "version_affected" : "=" }, { "version_value" : "0.0.7.2", "version_affected" : "=" }, { "version_value" : "0.0.7.3", "version_affected" : "=" }, { "version_value" : "0.0.8", "version_affected" : "=" }, { "version_value" : "0.0.8.1", "version_affected" : "=" }, { "version_value" : "0.0.9", "version_affected" : "=" }, { "version_value" : "0.0.9.1", "version_affected" : "=" }, { "version_value" : "0.0.9.2", "version_affected" : "=" }, { "version_value" : "0.0.9.3", "version_affected" : "=" }, { "version_value" : "0.0.9.4", "version_affected" : "=" }, { "version_value" : "0.0.9.5", "version_affected" : "=" }, { "version_value" : "0.0.9.6", "version_affected" : "=" }, { "version_value" : "0.0.9.7", "version_affected" : "=" }, { "version_value" : "0.0.9.8", "version_affected" : "=" }, { "version_value" : "0.0.9.9", "version_affected" : "=" }, { "version_value" : "0.0.9.10", "version_affected" : "=" }, { "version_value" : "0.1.0.1", "version_affected" : "=" }, { "version_value" : "0.1.0.2", "version_affected" : "=" }, { "version_value" : "0.1.0.3", "version_affected" : "=" }, { "version_value" : "0.1.0.4", "version_affected" : "=" }, { "version_value" : "0.1.0.5", "version_affected" : "=" }, { "version_value" : "0.1.0.6", "version_affected" : "=" }, { "version_value" : "0.1.0.7", "version_affected" : "=" }, { "version_value" : "0.1.0.8", "version_affected" : "=" }, { "version_value" : "0.1.0.9", "version_affected" : "=" }, { "version_value" : "0.1.0.10", "version_affected" : "=" }, { "version_value" : "0.1.0.11", "version_affected" : "=" }, { "version_value" : "0.1.0.12", "version_affected" : "=" }, { "version_value" : "0.1.0.13", "version_affected" : "=" }, { "version_value" : "0.1.0.14", "version_affected" : "=" }, { "version_value" : "0.1.0.15", "version_affected" : "=" }, { "version_value" : "0.1.0.16", "version_affected" : "=" }, { "version_value" : "0.1.0.17", "version_affected" : "=" }, { "version_value" : "0.1.0.18", "version_affected" : "=" }, { "version_value" : "0.1.0.19", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.1.1", "version_affected" : "=" }, { "version_value" : "0.1.1.1_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.2", "version_affected" : "=" }, { "version_value" : "0.1.1.2_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.3", "version_affected" : "=" }, { "version_value" : "0.1.1.3_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.4", "version_affected" : "=" }, { "version_value" : "0.1.1.4_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.5", "version_affected" : "=" }, { "version_value" : "0.1.1.5_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.6", "version_affected" : "=" }, { "version_value" : "0.1.1.6_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.7", "version_affected" : "=" }, { "version_value" : "0.1.1.7_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.8", "version_affected" : "=" }, { "version_value" : "0.1.1.8_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.9", "version_affected" : "=" }, { "version_value" : "0.1.1.9_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.10", "version_affected" : "=" }, { "version_value" : "0.1.1.10_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.11", "version_affected" : "=" }, { "version_value" : "0.1.1.12", "version_affected" : "=" }, { "version_value" : "0.1.1.13", "version_affected" : "=" }, { "version_value" : "0.1.1.14", "version_affected" : "=" }, { "version_value" : "0.1.1.15", "version_affected" : "=" }, { "version_value" : "0.1.1.16", "version_affected" : "=" }, { "version_value" : "0.1.1.17", "version_affected" : "=" }, { "version_value" : "0.1.1.18", "version_affected" : "=" }, { "version_value" : "0.1.1.19", "version_affected" : "=" }, { "version_value" : "0.1.1.20", "version_affected" : "=" }, { "version_value" : "0.1.1.21", "version_affected" : "=" }, { "version_value" : "0.1.1.22", "version_affected" : "=" }, { "version_value" : "0.1.1.23", "version_affected" : "=" }, { "version_value" : "0.1.1.25", "version_affected" : "=" }, { "version_value" : "0.1.1.26", "version_affected" : "=" }, { "version_value" : "0.1.2.1_alpha-cvs", "version_affected" : "=" }, { "version_value" : "0.1.2.2", "version_affected" : "=" }, { "version_value" : "0.1.2.4", "version_affected" : "=" }, { "version_value" : "0.1.2.5", "version_affected" : "=" }, { "version_value" : "0.1.2.7", "version_affected" : "=" }, { "version_value" : "0.1.2.9", "version_affected" : "=" }, { "version_value" : "0.1.2.10", "version_affected" : "=" }, { "version_value" : "0.1.2.11", "version_affected" : "=" }, { "version_value" : "0.1.2.12", "version_affected" : "=" }, { "version_value" : "0.1.2.13", "version_affected" : "=" }, { "version_value" : "0.1.2.14", "version_affected" : "=" }, { "version_value" : "0.1.2.16", "version_affected" : "=" }, { "version_value" : "0.1.2.18", "version_affected" : "=" }, { "version_value" : "0.1.2.19", "version_affected" : "=" }, { "version_value" : "0.1.2.30", "version_affected" : "=" }, { "version_value" : "0.2.1.1.12", "version_affected" : "=" }, { "version_value" : "0.2.1.1.13", "version_affected" : "=" }, { "version_value" : "0.2.1.1.14", "version_affected" : "=" }, { "version_value" : "0.2.1.1.15", "version_affected" : "=" }, { "version_value" : "0.2.1.1.16", "version_affected" : "=" }, { "version_value" : "0.2.1.1.17", "version_affected" : "=" }, { "version_value" : "0.2.1.1.18", "version_affected" : "=" }, { "version_value" : "0.2.1.1.19", "version_affected" : "=" }, { "version_value" : "0.2.1.1.20", "version_affected" : "=" }, { "version_value" : "0.2.1.1.21", "version_affected" : "=" }, { "version_value" : "0.2.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2.2", "version_affected" : "=" }, { "version_value" : "0.2.2.3", "version_affected" : "=" }, { "version_value" : "0.2.2.4", "version_affected" : "=" }, { "version_value" : "0.2.2.5", "version_affected" : "=" }, { "version_value" : "0.2.2.6", "version_affected" : "=" }, { "version_value" : "0.2.2.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.seul.org/or/announce/Jan-2010/msg00000.html", "name" : "[or-announce] 20100121 Tor 0.2.1.22 is released (security fix)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://archives.seul.org/or/talk/Jan-2010/msg00161.html", "name" : "[or-talk] 20100120 Tor Project infrastructure updates in response to security breach", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://archives.seul.org/or/talk/Jan-2010/msg00162.html", "name" : "[or-talk] 20100120 Tor 0.2.2.7-alpha is out", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://archives.seul.org/or/talk/Jan-2010/msg00165.html", "name" : "[or-talk] 20100120 Re: Tor Project infrastructure updates in response to security breach", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://osvdb.org/61977", "name" : "61977", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38198", "name" : "38198", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37901", "name" : "37901", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, uses deprecated identity keys for certain directory authorities, which makes it easier for man-in-the-middle attackers to compromise the anonymity of traffic sources and destinations." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.7:alpha:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2010-02-05T07:13Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0384", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tor", "product" : { "product_data" : [ { "product_name" : "tor", "version" : { "version_data" : [ { "version_value" : "0.2.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2.2", "version_affected" : "=" }, { "version_value" : "0.2.2.3", "version_affected" : "=" }, { "version_value" : "0.2.2.4", "version_affected" : "=" }, { "version_value" : "0.2.2.5", "version_affected" : "=" }, { "version_value" : "0.2.2.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.seul.org/or/talk/Jan-2010/msg00162.html", "name" : "[or-talk] 20100120 Tor 0.2.2.7-alpha is out", "refsource" : "MLIST", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Tor 0.2.2.x before 0.2.2.7-alpha, when functioning as a directory mirror, does not prevent logging of the client IP address upon detection of erroneous client behavior, which might make it easier for local users to discover the identities of clients in opportunistic circumstances by reading log files." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.6:alpha:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2011-04-27T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0385", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "tor", "product" : { "product_data" : [ { "product_name" : "tor", "version" : { "version_data" : [ { "version_value" : "0.0.2", "version_affected" : "=" }, { "version_value" : "0.0.2_pre13", "version_affected" : "=" }, { "version_value" : "0.0.2_pre14", "version_affected" : "=" }, { "version_value" : "0.0.2_pre15", "version_affected" : "=" }, { "version_value" : "0.0.2_pre16", "version_affected" : "=" }, { "version_value" : "0.0.2_pre17", "version_affected" : "=" }, { "version_value" : "0.0.2_pre18", "version_affected" : "=" }, { "version_value" : "0.0.2_pre19", "version_affected" : "=" }, { "version_value" : "0.0.2_pre20", "version_affected" : "=" }, { "version_value" : "0.0.2_pre21", "version_affected" : "=" }, { "version_value" : "0.0.2_pre22", "version_affected" : "=" }, { "version_value" : "0.0.2_pre23", "version_affected" : "=" }, { "version_value" : "0.0.2_pre24", "version_affected" : "=" }, { "version_value" : "0.0.2_pre25", "version_affected" : "=" }, { "version_value" : "0.0.2_pre26", "version_affected" : "=" }, { "version_value" : "0.0.2_pre27", "version_affected" : "=" }, { "version_value" : "0.0.3", "version_affected" : "=" }, { "version_value" : "0.0.4", "version_affected" : "=" }, { "version_value" : "0.0.5", "version_affected" : "=" }, { "version_value" : "0.0.6", "version_affected" : "=" }, { "version_value" : "0.0.6.1", "version_affected" : "=" }, { "version_value" : "0.0.6.2", "version_affected" : "=" }, { "version_value" : "0.0.7", "version_affected" : "=" }, { "version_value" : "0.0.7.1", "version_affected" : "=" }, { "version_value" : "0.0.7.2", "version_affected" : "=" }, { "version_value" : "0.0.7.3", "version_affected" : "=" }, { "version_value" : "0.0.8", "version_affected" : "=" }, { "version_value" : "0.0.8.1", "version_affected" : "=" }, { "version_value" : "0.0.9", "version_affected" : "=" }, { "version_value" : "0.0.9.1", "version_affected" : "=" }, { "version_value" : "0.0.9.2", "version_affected" : "=" }, { "version_value" : "0.0.9.3", "version_affected" : "=" }, { "version_value" : "0.0.9.4", "version_affected" : "=" }, { "version_value" : "0.0.9.5", "version_affected" : "=" }, { "version_value" : "0.0.9.6", "version_affected" : "=" }, { "version_value" : "0.0.9.7", "version_affected" : "=" }, { "version_value" : "0.0.9.8", "version_affected" : "=" }, { "version_value" : "0.0.9.9", "version_affected" : "=" }, { "version_value" : "0.0.9.10", "version_affected" : "=" }, { "version_value" : "0.1.0.1", "version_affected" : "=" }, { "version_value" : "0.1.0.2", "version_affected" : "=" }, { "version_value" : "0.1.0.3", "version_affected" : "=" }, { "version_value" : "0.1.0.4", "version_affected" : "=" }, { "version_value" : "0.1.0.5", "version_affected" : "=" }, { "version_value" : "0.1.0.6", "version_affected" : "=" }, { "version_value" : "0.1.0.7", "version_affected" : "=" }, { "version_value" : "0.1.0.8", "version_affected" : "=" }, { "version_value" : "0.1.0.9", "version_affected" : "=" }, { "version_value" : "0.1.0.10", "version_affected" : "=" }, { "version_value" : "0.1.0.11", "version_affected" : "=" }, { "version_value" : "0.1.0.12", "version_affected" : "=" }, { "version_value" : "0.1.0.13", "version_affected" : "=" }, { "version_value" : "0.1.0.14", "version_affected" : "=" }, { "version_value" : "0.1.0.15", "version_affected" : "=" }, { "version_value" : "0.1.0.16", "version_affected" : "=" }, { "version_value" : "0.1.0.17", "version_affected" : "=" }, { "version_value" : "0.1.0.18", "version_affected" : "=" }, { "version_value" : "0.1.0.19", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.1.1", "version_affected" : "=" }, { "version_value" : "0.1.1.1_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.2", "version_affected" : "=" }, { "version_value" : "0.1.1.2_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.3", "version_affected" : "=" }, { "version_value" : "0.1.1.3_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.4", "version_affected" : "=" }, { "version_value" : "0.1.1.4_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.5", "version_affected" : "=" }, { "version_value" : "0.1.1.5_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.6", "version_affected" : "=" }, { "version_value" : "0.1.1.6_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.7", "version_affected" : "=" }, { "version_value" : "0.1.1.7_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.8", "version_affected" : "=" }, { "version_value" : "0.1.1.8_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.9", "version_affected" : "=" }, { "version_value" : "0.1.1.9_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.10", "version_affected" : "=" }, { "version_value" : "0.1.1.10_alpha", "version_affected" : "=" }, { "version_value" : "0.1.1.11", "version_affected" : "=" }, { "version_value" : "0.1.1.12", "version_affected" : "=" }, { "version_value" : "0.1.1.13", "version_affected" : "=" }, { "version_value" : "0.1.1.14", "version_affected" : "=" }, { "version_value" : "0.1.1.15", "version_affected" : "=" }, { "version_value" : "0.1.1.16", "version_affected" : "=" }, { "version_value" : "0.1.1.17", "version_affected" : "=" }, { "version_value" : "0.1.1.18", "version_affected" : "=" }, { "version_value" : "0.1.1.19", "version_affected" : "=" }, { "version_value" : "0.1.1.20", "version_affected" : "=" }, { "version_value" : "0.1.1.21", "version_affected" : "=" }, { "version_value" : "0.1.1.22", "version_affected" : "=" }, { "version_value" : "0.1.1.23", "version_affected" : "=" }, { "version_value" : "0.1.1.25", "version_affected" : "=" }, { "version_value" : "0.1.1.26", "version_affected" : "=" }, { "version_value" : "0.1.2.1_alpha-cvs", "version_affected" : "=" }, { "version_value" : "0.1.2.2", "version_affected" : "=" }, { "version_value" : "0.1.2.4", "version_affected" : "=" }, { "version_value" : "0.1.2.5", "version_affected" : "=" }, { "version_value" : "0.1.2.7", "version_affected" : "=" }, { "version_value" : "0.1.2.9", "version_affected" : "=" }, { "version_value" : "0.1.2.10", "version_affected" : "=" }, { "version_value" : "0.1.2.11", "version_affected" : "=" }, { "version_value" : "0.1.2.12", "version_affected" : "=" }, { "version_value" : "0.1.2.13", "version_affected" : "=" }, { "version_value" : "0.1.2.14", "version_affected" : "=" }, { "version_value" : "0.1.2.16", "version_affected" : "=" }, { "version_value" : "0.1.2.18", "version_affected" : "=" }, { "version_value" : "0.1.2.19", "version_affected" : "=" }, { "version_value" : "0.1.2.30", "version_affected" : "=" }, { "version_value" : "0.2.1.1.12", "version_affected" : "=" }, { "version_value" : "0.2.1.1.13", "version_affected" : "=" }, { "version_value" : "0.2.1.1.14", "version_affected" : "=" }, { "version_value" : "0.2.1.1.15", "version_affected" : "=" }, { "version_value" : "0.2.1.1.16", "version_affected" : "=" }, { "version_value" : "0.2.1.1.17", "version_affected" : "=" }, { "version_value" : "0.2.1.1.18", "version_affected" : "=" }, { "version_value" : "0.2.1.1.19", "version_affected" : "=" }, { "version_value" : "0.2.1.1.20", "version_affected" : "=" }, { "version_value" : "0.2.1.1.21", "version_affected" : "=" }, { "version_value" : "0.2.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2.2", "version_affected" : "=" }, { "version_value" : "0.2.2.3", "version_affected" : "=" }, { "version_value" : "0.2.2.4", "version_affected" : "=" }, { "version_value" : "0.2.2.5", "version_affected" : "=" }, { "version_value" : "0.2.2.6", "version_affected" : "=" }, { "version_value" : "0.2.2.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.seul.org/or/announce/Jan-2010/msg00000.html", "name" : "[or-announce] 20100121 Tor 0.2.1.22 is released (security fix)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://archives.seul.org/or/talk/Jan-2010/msg00162.html", "name" : "[or-talk] 20100120 Tor 0.2.2.7-alpha is out", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38198", "name" : "38198", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/61865", "name" : "61865", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37901", "name" : "37901", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Tor before 0.2.1.22, and 0.2.2.x before 0.2.2.7-alpha, when functioning as a bridge directory authority, allows remote attackers to obtain sensitive information about bridge identities and bridge descriptors via a dbg-stability.txt directory query." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.2_pre27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.0.9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.1_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.2_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.3_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.4_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.5_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.6_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.7_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.8_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.9_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.10_alpha:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.1.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.1_alpha-cvs:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.7:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.1.2.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.1.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.3:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.4:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.5:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.6:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:tor:tor:0.2.2.7:alpha:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2010-01-26T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0386", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_application_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-16" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1", "name" : "200942", "refsource" : "SUNALERT", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of Sun Java System Application Server 7 and 7 2004Q2 enables the HTTP TRACE method, which makes it easier for remote attackers to steal cookies and authentication credentials via a cross-site tracing (XST) attack, a related issue to CVE-2004-2763 and CVE-2005-3398." }, { "lang" : "en", "value" : "Per: http://sunsolve.sun.com/search/document.do?assetkey=1-66-200942-1\r\n\r\n\r\nContributing Factors\r\n\r\nThis issue can occur in the following releases:\r\n\r\n * Sun Java System Application Server Standard Edition 7 and later updates\r\n * Sun Java System Application Server Standard Edition 7 2004Q2 and later updates\r\n * Sun Java System Application Server Platform Edition 7 and later updates" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:platform:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_application_server:7.0:*:standard:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2010-01-31T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0387", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-digest.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70u7-digest.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://lists.immunitysec.com/pipermail/dailydave/2010-January/006014.html", "name" : "[dailydave] 20100120 Sun Web Server digest auth overflow", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023488", "name" : "1023488", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37896", "name" : "37896", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55792", "name" : "jsws-digest-header-bo(55792)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple heap-based buffer overflows in (1) webservd and (2) the admin server in Sun Java System Web Server 7.0 Update 7 allow remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long string in an \"Authorization: Digest\" HTTP header." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0388", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-134" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-webdav.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37910", "name" : "37910", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55812", "name" : "jsws-webdav-format-string(55812)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Format string vulnerability in the WebDAV implementation in webservd in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in the encoding attribute of the XML declaration in a PROPFIND request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0389", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "java_system_web_server", "version" : { "version_data" : [ { "version_value" : "7.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html", "name" : "http://intevydis.blogspot.com/2010/01/sun-java-system-web-server-70-admin.html", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The admin server in Sun Java System Web Server 7.0 Update 6 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via an HTTP request that lacks a method token." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/slices/2000.html\r\n\r\nCWE-476 NULL Pointer Dereference" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:java_system_web_server:7.0:update_7:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-25T19:30Z", "lastModifiedDate" : "2010-01-31T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0390", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpf1", "product" : { "product_data" : [ { "product_name" : "max's_image_uploader", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61808", "name" : "61808", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38018", "name" : "38018", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11169", "name" : "11169", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unrestricted file upload vulnerability in maxImageUpload/index.php in PHP F1 Max's Image Uploader 1.0, when Apache is not configured to handle the mime-type for files with pjpeg or jpeg extensions, allows remote attackers to execute arbitrary code by uploading a file with a pjpeg or jpeg extension, then accessing it via a direct request to the file in original/. NOTE: some of these details are obtained from third party information." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/434.html\r\n\r\n'CWE-434: Unrestricted Upload of File with Dangerous Type'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpf1:max\\'s_image_uploader:1.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-26T18:30Z", "lastModifiedDate" : "2011-01-12T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0391", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "embarcadero", "product" : { "product_data" : [ { "product_name" : "interbase_smp_2009", "version" : { "version_data" : [ { "version_value" : "9.0.3.437", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61892", "name" : "61892", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38285", "name" : "38285", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/37916", "name" : "37916", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in Embarcadero Technologies InterBase SMP 2009 9.0.3.437 allow remote attackers to execute arbitrary code via unknown vectors involving crafted packets. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:embarcadero:interbase_smp_2009:9.0.3.437:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-26T18:30Z", "lastModifiedDate" : "2011-01-12T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0392", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "thegreenbow", "product" : { "product_data" : [ { "product_name" : "ipsec_vpn_client", "version" : { "version_data" : [ { "version_value" : "4.51.001", "version_affected" : "=" }, { "version_value" : "4.65.003", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61866", "name" : "61866", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38262", "name" : "38262", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509091/100/0/threaded", "name" : "20100121 TheGreenBow VPN Client Local Stack Overflow Vulnerability - Security Advisory - SOS-10-001", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40387", "name" : "40387", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.senseofsecurity.com.au/advisories/SOS-10-001", "name" : "http://www.senseofsecurity.com.au/advisories/SOS-10-001", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.thegreenbow.com/download.php?id=1000150", "name" : "http://www.thegreenbow.com/download.php?id=1000150", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55793", "name" : "ipsecvpnclient-tgb-bo(55793)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in vpnconf.exe in TheGreenBow IPSec VPN Client 4.51.001, 4.65.003, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a long OpenScriptAfterUp parameter in a policy (.tgb) file, related to \"phase 2.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thegreenbow:ipsec_vpn_client:4.51.001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:thegreenbow:ipsec_vpn_client:4.65.003:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-26T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0393", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "cups", "version" : { "version_data" : [ { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201207-10.xml", "name" : "GLSA-201207-10", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.cups.org/str.php?L3482", "name" : "http://www.cups.org/str.php?L3482", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:072", "name" : "MDVSA-2010:072", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:073", "name" : "MDVSA-2010:073", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38524", "name" : "38524", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-906-1", "name" : "USN-906-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=558460", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=558460", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The _cupsGetlang function, as used by lppasswd.c in lppasswd in CUPS 1.2.2, 1.3.7, 1.3.9, and 1.4.1, relies on an environment variable to determine the file that provides localized message strings, which allows local users to gain privileges via a file that contains crafted localization data with format string specifiers." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.4.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-05T19:30Z", "lastModifiedDate" : "2013-05-15T03:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0394", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "nanosleep", "product" : { "product_data" : [ { "product_name" : "trac-git", "version" : { "version_data" : [ { "version_value" : "0.0.20080710", "version_affected" : "<=" }, { "version_value" : "0.0.20090320", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567039", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://osvdb.org/62147", "name" : "62147", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38325", "name" : "38325", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1990", "name" : "DSA-1990", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38076", "name" : "38076", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56105", "name" : "tracgit-command-execution(56105)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "PyGIT.py in the Trac Git plugin (trac-git) before 0.0.20080710-3+lenny1 and before 0.0.20090320-1 on Debian GNU/Linux, when enabled in Trac, allows remote attackers to execute arbitrary commands via shell metacharacters in a crafted HTTP query that is used to generate a certain git command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nanosleep:trac-git:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.0.20080710" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:nanosleep:trac-git:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.0.20090320" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:edgewall_software:trac:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-10T02:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0395", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "openoffice.org", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "3.0.0", "version_affected" : "=" }, { "version_value" : "3.0.1", "version_affected" : "=" }, { "version_value" : "3.1.0", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.2.0", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" }, { "version_value" : "10.04", "version_affected" : "=" }, { "version_value" : "10.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "fedoraproject", "product" : { "product_data" : [ { "product_name" : "fedora", "version" : { "version_data" : [ { "version_value" : "12", "version_affected" : "=" }, { "version_value" : "13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042468.html", "name" : "FEDORA-2010-9576", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042529.html", "name" : "FEDORA-2010-9628", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042534.html", "name" : "FEDORA-2010-9633", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html", "name" : "SUSE-SR:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40070", "name" : "40070", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40084", "name" : "40084", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40104", "name" : "40104", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40107", "name" : "40107", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/41818", "name" : "41818", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/60799", "name" : "60799", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-949-1", "name" : "USN-949-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2055", "name" : "DSA-2055", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-201408-19.xml", "name" : "GLSA-201408-19", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:221", "name" : "MDVSA-2010:221", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openoffice.org/security/cves/CVE-2010-0395.html", "name" : "http://www.openoffice.org/security/cves/CVE-2010-0395.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0459.html", "name" : "RHSA-2010:0459", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-287A.html", "name" : "TA10-287A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1350", "name" : "ADV-2010-1350", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1353", "name" : "ADV-2010-1353", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1366", "name" : "ADV-2010-1366", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1369", "name" : "ADV-2010-1369", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2905", "name" : "ADV-2010-2905", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=574119", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=574119", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11091", "name" : "oval:org.mitre.oval:def:11091", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:-:lts:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:10.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:fedoraproject:fedora:13:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:3.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:3.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:3.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:3.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sun:openoffice.org:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.2.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-10T00:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0396", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "dpkg", "version" : { "version_data" : [ { "version_value" : "1.9.19", "version_affected" : "=" }, { "version_value" : "1.9.20", "version_affected" : "=" }, { "version_value" : "1.9.21", "version_affected" : "=" }, { "version_value" : "1.10", "version_affected" : "=" }, { "version_value" : "1.10.1", "version_affected" : "=" }, { "version_value" : "1.10.2", "version_affected" : "=" }, { "version_value" : "1.10.3", "version_affected" : "=" }, { "version_value" : "1.10.4", "version_affected" : "=" }, { "version_value" : "1.10.5", "version_affected" : "=" }, { "version_value" : "1.10.6", "version_affected" : "=" }, { "version_value" : "1.10.7", "version_affected" : "=" }, { "version_value" : "1.10.8", "version_affected" : "=" }, { "version_value" : "1.10.9", "version_affected" : "=" }, { "version_value" : "1.10.10", "version_affected" : "=" }, { "version_value" : "1.10.11", "version_affected" : "=" }, { "version_value" : "1.10.12", "version_affected" : "=" }, { "version_value" : "1.10.13", "version_affected" : "=" }, { "version_value" : "1.10.14", "version_affected" : "=" }, { "version_value" : "1.10.15", "version_affected" : "=" }, { "version_value" : "1.10.16", "version_affected" : "=" }, { "version_value" : "1.10.17", "version_affected" : "=" }, { "version_value" : "1.10.18", "version_affected" : "=" }, { "version_value" : "1.10.18.1", "version_affected" : "=" }, { "version_value" : "1.10.19", "version_affected" : "=" }, { "version_value" : "1.10.20", "version_affected" : "=" }, { "version_value" : "1.10.21", "version_affected" : "=" }, { "version_value" : "1.10.22", "version_affected" : "=" }, { "version_value" : "1.10.23", "version_affected" : "=" }, { "version_value" : "1.10.24", "version_affected" : "=" }, { "version_value" : "1.10.25", "version_affected" : "=" }, { "version_value" : "1.10.26", "version_affected" : "=" }, { "version_value" : "1.10.27", "version_affected" : "=" }, { "version_value" : "1.10.28", "version_affected" : "=" }, { "version_value" : "1.13.0", "version_affected" : "=" }, { "version_value" : "1.13.1", "version_affected" : "=" }, { "version_value" : "1.13.2", "version_affected" : "=" }, { "version_value" : "1.13.3", "version_affected" : "=" }, { "version_value" : "1.13.4", "version_affected" : "=" }, { "version_value" : "1.13.5", "version_affected" : "=" }, { "version_value" : "1.13.6", "version_affected" : "=" }, { "version_value" : "1.13.7", "version_affected" : "=" }, { "version_value" : "1.13.8", "version_affected" : "=" }, { "version_value" : "1.13.9", "version_affected" : "=" }, { "version_value" : "1.13.10", "version_affected" : "=" }, { "version_value" : "1.13.11", "version_affected" : "=" }, { "version_value" : "1.13.11.1", "version_affected" : "=" }, { "version_value" : "1.13.12", "version_affected" : "=" }, { "version_value" : "1.13.13", "version_affected" : "=" }, { "version_value" : "1.13.14", "version_affected" : "=" }, { "version_value" : "1.13.15", "version_affected" : "=" }, { "version_value" : "1.13.16", "version_affected" : "=" }, { "version_value" : "1.13.17", "version_affected" : "=" }, { "version_value" : "1.13.18", "version_affected" : "=" }, { "version_value" : "1.13.19", "version_affected" : "=" }, { "version_value" : "1.13.20", "version_affected" : "=" }, { "version_value" : "1.13.21", "version_affected" : "=" }, { "version_value" : "1.13.22", "version_affected" : "=" }, { "version_value" : "1.13.23", "version_affected" : "=" }, { "version_value" : "1.13.24", "version_affected" : "=" }, { "version_value" : "1.13.25", "version_affected" : "=" }, { "version_value" : "1.14.0", "version_affected" : "=" }, { "version_value" : "1.14.1", "version_affected" : "=" }, { "version_value" : "1.14.2", "version_affected" : "=" }, { "version_value" : "1.14.3", "version_affected" : "=" }, { "version_value" : "1.14.4", "version_affected" : "=" }, { "version_value" : "1.14.5", "version_affected" : "=" }, { "version_value" : "1.14.6", "version_affected" : "=" }, { "version_value" : "1.14.7", "version_affected" : "=" }, { "version_value" : "1.14.8", "version_affected" : "=" }, { "version_value" : "1.14.9", "version_affected" : "=" }, { "version_value" : "1.14.10", "version_affected" : "=" }, { "version_value" : "1.14.11", "version_affected" : "=" }, { "version_value" : "1.14.12", "version_affected" : "=" }, { "version_value" : "1.14.13", "version_affected" : "=" }, { "version_value" : "1.14.14", "version_affected" : "=" }, { "version_value" : "1.14.15", "version_affected" : "=" }, { "version_value" : "1.14.16", "version_affected" : "=" }, { "version_value" : "1.14.16.1", "version_affected" : "=" }, { "version_value" : "1.14.16.2", "version_affected" : "=" }, { "version_value" : "1.14.16.3", "version_affected" : "=" }, { "version_value" : "1.14.16.4", "version_affected" : "=" }, { "version_value" : "1.14.16.5", "version_affected" : "=" }, { "version_value" : "1.14.16.6", "version_affected" : "=" }, { "version_value" : "1.14.17", "version_affected" : "=" }, { "version_value" : "1.14.18", "version_affected" : "=" }, { "version_value" : "1.14.19", "version_affected" : "=" }, { "version_value" : "1.14.20", "version_affected" : "=" }, { "version_value" : "1.14.21", "version_affected" : "=" }, { "version_value" : "1.14.22", "version_affected" : "=" }, { "version_value" : "1.14.23", "version_affected" : "=" }, { "version_value" : "1.14.24", "version_affected" : "=" }, { "version_value" : "1.14.25", "version_affected" : "=" }, { "version_value" : "1.14.26", "version_affected" : "=" }, { "version_value" : "1.14.27", "version_affected" : "=" }, { "version_value" : "1.14.28", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://security.debian.org/pool/updates/main/d/dpkg/dpkg_1.14.29.tar.gz", "name" : "http://security.debian.org/pool/updates/main/d/dpkg/dpkg_1.14.29.tar.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2011", "name" : "DSA-2011", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0582", "name" : "ADV-2010-0582", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56887", "name" : "dpkg-dpkgsource-dir-traversal(56887)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the dpkg-source component in dpkg before 1.14.29 allows remote attackers to modify arbitrary files via a crafted Debian source archive." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.9.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.9.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.9.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.18.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.10.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.13.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.16.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:1.14.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:debian:dpkg:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.14.28" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-15T13:28Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0397", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "php", "product" : { "product_data" : [ { "product_name" : "php", "version" : { "version_data" : [ { "version_value" : "5.3.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=573573", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Aug/msg00003.html", "name" : "APPLE-SA-2010-08-24-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html", "name" : "SUSE-SR:2010:012", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42410", "name" : "42410", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4312", "name" : "http://support.apple.com/kb/HT4312", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:068", "name" : "MDVSA-2010:068", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/03/12/5", "name" : "[oss-security] 20100312 CVE-2010-0397: NULL pointer dereference in PHP's xmlrpc extension", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0919.html", "name" : "RHSA-2010:0919", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38708", "name" : "38708", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0724", "name" : "ADV-2010-0724", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3081", "name" : "ADV-2010-3081", "refsource" : "VUPEN", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The xmlrpc extension in PHP 5.3.1 does not properly handle a missing methodName element in the first argument to the xmlrpc_decode_request function, which allows context-dependent attackers to cause a denial of service (NULL pointer dereference and application crash) and possibly have unspecified other impact via a crafted argument." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/slices/2000.html\r\n\r\nImproper Check for Unusual or Exceptional Conditions CWE-754" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:php:php:5.3.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-16T19:30Z", "lastModifiedDate" : "2010-12-10T06:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0398", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugs.launchpad.net/ubuntu/+source/autokey/+bug/538471", "name" : "https://bugs.launchpad.net/ubuntu/+source/autokey/+bug/538471", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "https://security-tracker.debian.org/tracker/CVE-2010-0398", "name" : "https://security-tracker.debian.org/tracker/CVE-2010-0398", "refsource" : "MISC", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The init script in autokey before 0.61.3-2 allows local attackers to write to arbitrary files via a symlink attack." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:autokey_project:autokey:*:*:*:*:*:*:*:*", "versionEndExcluding" : "0.61.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 4.9, "acInsufInfo" : false, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2019-10-30T22:15Z", "lastModifiedDate" : "2019-11-05T16:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0400", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "mahara", "product" : { "product_data" : [ { "product_name" : "mahara", "version" : { "version_data" : [ { "version_value" : "1.0.4", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+lenny5.diff.gz", "name" : "http://security.debian.org/pool/updates/main/m/mahara/mahara_1.0.4-4+lenny5.diff.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2030", "name" : "DSA-2030", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39253", "name" : "39253", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in lib/user.php in mahara 1.0.4 allows remote attackers to execute arbitrary SQL commands via a username." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:mahara:mahara:1.0.4:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-07T15:30Z", "lastModifiedDate" : "2010-04-08T13:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0401", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openttd", "product" : { "product_data" : [ { "product_name" : "openttd", "version" : { "version_data" : [ { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.2.1", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.3.4", "version_affected" : "=" }, { "version_value" : "0.3.5", "version_affected" : "=" }, { "version_value" : "0.3.6", "version_affected" : "=" }, { "version_value" : "0.3.7", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.4.7", "version_affected" : "=" }, { "version_value" : "0.4.8", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.7.4", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.openttd.org/task/3754", "name" : "http://bugs.openttd.org/task/3754", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39669", "name" : "39669", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.openttd.org/en/CVE-2010-0401", "name" : "http://security.openttd.org/en/CVE-2010-0401", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenTTD before 1.0.1 accepts a company password for authentication in response to a request for the server password, which allows remote authenticated users to bypass intended access restrictions or cause a denial of service (daemon crash) by sending a company password packet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-05T13:22Z", "lastModifiedDate" : "2010-05-11T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0402", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openttd", "product" : { "product_data" : [ { "product_name" : "openttd", "version" : { "version_data" : [ { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.2.1", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.3.4", "version_affected" : "=" }, { "version_value" : "0.3.5", "version_affected" : "=" }, { "version_value" : "0.3.6", "version_affected" : "=" }, { "version_value" : "0.3.7", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.4.7", "version_affected" : "=" }, { "version_value" : "0.4.8", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.7.4", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39669", "name" : "39669", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.openttd.org/en/CVE-2010-0402", "name" : "http://security.openttd.org/en/CVE-2010-0402", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenTTD before 1.0.1 does not properly validate index values of certain items, which allows remote authenticated users to cause a denial of service (daemon crash) or possibly execute arbitrary code via a crafted in-game command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-05T13:22Z", "lastModifiedDate" : "2010-05-05T13:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0403", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpgroupware", "product" : { "product_data" : [ { "product_name" : "phpgroupware", "version" : { "version_data" : [ { "version_value" : "0.9.16", "version_affected" : "=" }, { "version_value" : "0.9.16.000", "version_affected" : "=" }, { "version_value" : "0.9.16.001", "version_affected" : "=" }, { "version_value" : "0.9.16.002", "version_affected" : "=" }, { "version_value" : "0.9.16.003", "version_affected" : "=" }, { "version_value" : "0.9.16.005", "version_affected" : "=" }, { "version_value" : "0.9.16.010", "version_affected" : "=" }, { "version_value" : "0.9.16.011", "version_affected" : "=" }, { "version_value" : "0.9.16.012", "version_affected" : "=" }, { "version_value" : "0.9.16.014", "version_affected" : "=" }, { "version_value" : "0.9.16.015", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://download.phpgroupware.org/", "name" : "http://download.phpgroupware.org/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0", "name" : "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html", "name" : "[phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39665", "name" : "39665", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39731", "name" : "39731", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2046", "name" : "DSA-2046", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511299/100/0/threaded", "name" : "20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40167", "name" : "40167", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1145", "name" : "ADV-2010-1145", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1146", "name" : "ADV-2010-1146", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/58657", "name" : "phpgroupware-about-file-include(58657)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in about.php in phpGroupWare (phpgw) before 0.9.16.016 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the app parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.9.16.015" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-19T12:08Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0404", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "phpgroupware", "product" : { "product_data" : [ { "product_name" : "phpgroupware", "version" : { "version_data" : [ { "version_value" : "0.9.16", "version_affected" : "=" }, { "version_value" : "0.9.16.000", "version_affected" : "=" }, { "version_value" : "0.9.16.001", "version_affected" : "=" }, { "version_value" : "0.9.16.002", "version_affected" : "=" }, { "version_value" : "0.9.16.003", "version_affected" : "=" }, { "version_value" : "0.9.16.005", "version_affected" : "=" }, { "version_value" : "0.9.16.010", "version_affected" : "=" }, { "version_value" : "0.9.16.011", "version_affected" : "=" }, { "version_value" : "0.9.16.012", "version_affected" : "=" }, { "version_value" : "0.9.16.014", "version_affected" : "=" }, { "version_value" : "0.9.16.015", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://download.phpgroupware.org/", "name" : "http://download.phpgroupware.org/", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0", "name" : "http://forums.phpgroupware.org/index.php?t=msg&th=98662&start=0&rid=0", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.gnu.org/archive/html/phpgroupware-users/2010-05/msg00004.html", "name" : "[phpgroupware-users] 20100512 Phpgroupware security release 0.9.16.016", "refsource" : "MLIST", "tags" : [ "Patch" ] }, { "url" : "http://secunia.com/advisories/39665", "name" : "39665", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39731", "name" : "39731", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2046", "name" : "DSA-2046", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511299/100/0/threaded", "name" : "20100514 phpGroupWare SQL Injections and Local File Inclusion Vulnerabilities (CVE-2010-0403 and CVE-2010-0404)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1145", "name" : "ADV-2010-1145", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1146", "name" : "ADV-2010-1146", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in phpGroupWare (phpgw) before 0.9.16.016 allow remote attackers to execute arbitrary SQL commands via unspecified parameters to (1) class.sessions_db.inc.php, (2) class.translation_sql.inc.php, or (3) class.auth_sql.inc.php in phpgwapi/inc/." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.001:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.002:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.003:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.005:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.010:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.011:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.012:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:0.9.16.014:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:phpgroupware:phpgroupware:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.9.16.015" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-19T12:08Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0405", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "bzip", "product" : { "product_data" : [ { "product_name" : "bzip2", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "0.9.0", "version_affected" : "=" }, { "version_value" : "0.9.0a", "version_affected" : "=" }, { "version_value" : "0.9.0b", "version_affected" : "=" }, { "version_value" : "0.9.0c", "version_affected" : "=" }, { "version_value" : "0.9.5_a", "version_affected" : "=" }, { "version_value" : "0.9.5_b", "version_affected" : "=" }, { "version_value" : "0.9.5_c", "version_affected" : "=" }, { "version_value" : "0.9.5_d", "version_affected" : "=" }, { "version_value" : "0.9.5a", "version_affected" : "=" }, { "version_value" : "0.9.5b", "version_affected" : "=" }, { "version_value" : "0.9.5c", "version_affected" : "=" }, { "version_value" : "0.9.5d", "version_affected" : "=" }, { "version_value" : "0.9_a", "version_affected" : "=" }, { "version_value" : "0.9_b", "version_affected" : "=" }, { "version_value" : "0.9_c", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "libzip2", "product" : { "product_data" : [ { "product_name" : "libzip2", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow", "name" : "http://blogs.sun.com/security/entry/cve_2010_0405_integer_overflow", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3", "name" : "http://git.clamav.net/gitweb?p=clamav-devel.git;a=blob_plain;f=ChangeLog;hb=clamav-0.96.3", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2011/Mar/msg00006.html", "name" : "APPLE-SA-2011-03-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051278.html", "name" : "FEDORA-2010-17439", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-November/051366.html", "name" : "FEDORA-2010-1512", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-10/msg00000.html", "name" : "SUSE-SR:2010:018", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=128506868510655&w=2", "name" : "[oss-security] 20100921 bzip2 CVE-2010-0405 integer overflow", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/41452", "name" : "41452", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/41505", "name" : "41505", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42350", "name" : "42350", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42404", "name" : "42404", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42405", "name" : "42405", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42529", "name" : "42529", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42530", "name" : "42530", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/48378", "name" : "48378", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201301-05.xml", "name" : "GLSA-201301-05", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4581", "name" : "http://support.apple.com/kb/HT4581", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.bzip.org/", "name" : "http://www.bzip.org/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0703.html", "name" : "RHSA-2010:0703", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0858.html", "name" : "RHSA-2010:0858", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/515055/100/0/threaded", "name" : "20101207 VMSA-2010-0019 VMware ESX third party updates for Service Console", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/usn-986-1", "name" : "USN-986-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-986-2", "name" : "USN-986-2", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-986-3", "name" : "USN-986-3", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2010-0019.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/2455", "name" : "ADV-2010-2455", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3043", "name" : "ADV-2010-3043", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3052", "name" : "ADV-2010-3052", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3073", "name" : "ADV-2010-3073", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3126", "name" : "ADV-2010-3126", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/3127", "name" : "ADV-2010-3127", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/", "name" : "http://xorl.wordpress.com/2010/09/21/cve-2010-0405-bzip2-integer-overflow/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=627882", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=627882", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230", "name" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2230", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231", "name" : "https://wwws.clamav.net/bugzilla/show_bug.cgi?id=2231", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in the BZ2_decompress function in decompress.c in bzip2 and libbzip2 before 1.0.6 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted compressed file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.0a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.0c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5_d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9.5d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:0.9_c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:bzip:bzip2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:libzip2:libzip2:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 5.1 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-09-28T18:00Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0406", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openttd", "product" : { "product_data" : [ { "product_name" : "openttd", "version" : { "version_data" : [ { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.1.2", "version_affected" : "=" }, { "version_value" : "0.1.3", "version_affected" : "=" }, { "version_value" : "0.1.4", "version_affected" : "=" }, { "version_value" : "0.2.0", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.3.0", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "=" }, { "version_value" : "0.3.2", "version_affected" : "=" }, { "version_value" : "0.3.2.1", "version_affected" : "=" }, { "version_value" : "0.3.3", "version_affected" : "=" }, { "version_value" : "0.3.4", "version_affected" : "=" }, { "version_value" : "0.3.5", "version_affected" : "=" }, { "version_value" : "0.3.6", "version_affected" : "=" }, { "version_value" : "0.3.7", "version_affected" : "=" }, { "version_value" : "0.4.0", "version_affected" : "=" }, { "version_value" : "0.4.0.1", "version_affected" : "=" }, { "version_value" : "0.4.5", "version_affected" : "=" }, { "version_value" : "0.4.6", "version_affected" : "=" }, { "version_value" : "0.4.7", "version_affected" : "=" }, { "version_value" : "0.4.8", "version_affected" : "=" }, { "version_value" : "0.5.0", "version_affected" : "=" }, { "version_value" : "0.5.1", "version_affected" : "=" }, { "version_value" : "0.5.2", "version_affected" : "=" }, { "version_value" : "0.5.3", "version_affected" : "=" }, { "version_value" : "0.6.0", "version_affected" : "=" }, { "version_value" : "0.6.1", "version_affected" : "=" }, { "version_value" : "0.6.2", "version_affected" : "=" }, { "version_value" : "0.7.4", "version_affected" : "=" }, { "version_value" : "1.0.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.openttd.org/task/3785", "name" : "http://bugs.openttd.org/task/3785", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39669", "name" : "39669", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://security.openttd.org/en/CVE-2010-0406", "name" : "http://security.openttd.org/en/CVE-2010-0406", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "OpenTTD before 1.0.1 allows remote attackers to cause a denial of service (file-descriptor exhaustion and daemon crash) by performing incomplete downloads of the map." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.4.8:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.0:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.1:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.5.3:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.6.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:0.7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openttd:openttd:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-05-05T13:22Z", "lastModifiedDate" : "2010-05-11T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0407", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "muscle", "product" : { "product_data" : [ { "product_name" : "pcsc-lite", "version" : { "version_data" : [ { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "=" }, { "version_value" : "1.4.4", "version_affected" : "=" }, { "version_value" : "1.4.99", "version_affected" : "=" }, { "version_value" : "1.4.100", "version_affected" : "=" }, { "version_value" : "1.4.101", "version_affected" : "=" }, { "version_value" : "1.4.102", "version_affected" : "=" }, { "version_value" : "1.5.0", "version_affected" : "=" }, { "version_value" : "1.5.1", "version_affected" : "=" }, { "version_value" : "1.5.2", "version_affected" : "=" }, { "version_value" : "1.5.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10691", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "name" : "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10705", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044124.html", "name" : "FEDORA-2010-10764", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042900.html", "name" : "FEDORA-2010-9995", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042921.html", "name" : "FEDORA-2010-10014", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-09/msg00006.html", "name" : "SUSE-SR:2010:017", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40140", "name" : "40140", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40239", "name" : "40239", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208", "name" : "http://svn.debian.org/wsvn/pcsclite/?sc=1&rev=4208", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2059", "name" : "DSA-2059", "refsource" : "DEBIAN", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/40758", "name" : "40758", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1427", "name" : "ADV-2010-1427", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1508", "name" : "ADV-2010-1508", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=596426", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=596426", "refsource" : "CONFIRM", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple buffer overflows in the MSGFunctionDemarshall function in winscard_svc.c in the PC/SC Smart Card daemon (aka PCSCD) in MUSCLE PCSC-Lite before 1.5.4 allow local users to gain privileges via crafted message data, which is improperly demarshalled." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.1.2:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.1.2:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.1.2:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.1.2:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.0:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.0:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.0:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta10:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.2.9:beta9:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.99:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.101:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.4.102:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:1.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:muscle:pcsc-lite:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.5.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-18T16:30Z", "lastModifiedDate" : "2016-12-08T03:01Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0408", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "http_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://httpd.apache.org/security/vulnerabilities_22.html", "name" : "http://httpd.apache.org/security/vulnerabilities_22.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html", "name" : "FEDORA-2010-5942", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html", "name" : "FEDORA-2010-6131", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html", "name" : "SUSE-SR:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2", "name" : "SSRT100108", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39100", "name" : "39100", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39501", "name" : "39501", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39628", "name" : "39628", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39632", "name" : "39632", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39656", "name" : "39656", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40096", "name" : "40096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ajp.c?r1=917876&r2=917875&pathrev=917876", "name" : "http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/modules/proxy/mod_proxy_ajp.c?r1=917876&r2=917875&pathrev=917876", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=917876", "name" : "http://svn.apache.org/viewvc?view=revision&revision=917876", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2035", "name" : "DSA-2035", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:053", "name" : "MDVSA-2010:053", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2013:150", "name" : "MDVSA-2013:150", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0168.html", "name" : "RHSA-2010:0168", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38491", "name" : "38491", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0911", "name" : "ADV-2010-0911", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0994", "name" : "ADV-2010-0994", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1001", "name" : "ADV-2010-1001", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1057", "name" : "ADV-2010-1057", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1411", "name" : "ADV-2010-1411", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM08939", "name" : "PM08939", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247", "name" : "PM12247", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829", "name" : "PM15829", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=569905", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=569905", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8619", "name" : "oval:org.mitre.oval:def:8619", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9935", "name" : "oval:org.mitre.oval:def:9935", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ap_proxy_ajp_request function in mod_proxy_ajp.c in mod_proxy_ajp in the Apache HTTP Server 2.2.x before 2.2.15 does not properly handle certain situations in which a client sends no request body, which allows remote attackers to cause a denial of service (backend server outage) via a crafted request, related to use of a 500 error code instead of the appropriate 400 error code." }, { "lang" : "en", "value" : "Per: http://httpd.apache.org/security/vulnerabilities_22.html\r\n\r\nAffects: 2.2.14, 2.2.13, 2.2.12, 2.2.11, 2.2.9, 2.2.8, 2.2.6, 2.2.5, 2.2.4, 2.2.3, 2.2.2, 2.2.0" }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/703.html\r\n\r\nCWE-703: Failure to Handle Exceptional Conditions" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.14:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T16:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0409", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "gmime", "version" : { "version_data" : [ { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.14-2.4.15.diff.gz", "name" : "http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.14-2.4.15.diff.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes", "name" : "http://ftp.gnome.org/pub/GNOME/sources/gmime/2.4/gmime-2.4.15.changes", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38459", "name" : "38459", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/03/2", "name" : "[oss-security] 20100203 CVE Request -- GMime-2.4.15", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/03/4", "name" : "[oss-security] 20100203 Re: CVE Request -- GMime-2.4.15", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=561457", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=561457", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the GMIME_UUENCODE_LEN macro in gmime/gmime-encodings.h in GMime before 2.4.15 allows context-dependent attackers to cause a denial of service (application crash) or possibly execute arbitrary code via input data for a uuencode operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:gmime:2.4.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-08T21:30Z", "lastModifiedDate" : "2010-03-31T05:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0410", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "canonical", "product" : { "product_data" : [ { "product_name" : "ubuntu_linux", "version" : { "version_data" : [ { "version_value" : "6.06", "version_affected" : "=" }, { "version_value" : "8.04", "version_affected" : "=" }, { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "9.04", "version_affected" : "=" }, { "version_value" : "9.10", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "debian", "product" : { "product_data" : [ { "product_name" : "debian_linux", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" } ] } } ] } }, { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.0.3", "version_affected" : "=" }, { "version_value" : "2.0.4", "version_affected" : "=" }, { "version_value" : "2.0.5", "version_affected" : "=" }, { "version_value" : "2.0.6", "version_affected" : "=" }, { "version_value" : "2.0.7", "version_affected" : "=" }, { "version_value" : "2.0.8", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.10", "version_affected" : "=" }, { "version_value" : "2.0.11", "version_affected" : "=" }, { "version_value" : "2.0.12", "version_affected" : "=" }, { "version_value" : "2.0.13", "version_affected" : "=" }, { "version_value" : "2.0.14", "version_affected" : "=" }, { "version_value" : "2.0.15", "version_affected" : "=" }, { "version_value" : "2.0.16", "version_affected" : "=" }, { "version_value" : "2.0.17", "version_affected" : "=" }, { "version_value" : "2.0.18", "version_affected" : "=" }, { "version_value" : "2.0.19", "version_affected" : "=" }, { "version_value" : "2.0.20", "version_affected" : "=" }, { "version_value" : "2.0.21", "version_affected" : "=" }, { "version_value" : "2.0.22", "version_affected" : "=" }, { "version_value" : "2.0.23", "version_affected" : "=" }, { "version_value" : "2.0.24", "version_affected" : "=" }, { "version_value" : "2.0.25", "version_affected" : "=" }, { "version_value" : "2.0.26", "version_affected" : "=" }, { "version_value" : "2.0.27", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.29", "version_affected" : "=" }, { "version_value" : "2.0.30", "version_affected" : "=" }, { "version_value" : "2.0.31", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.33", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.1.9", "version_affected" : "=" }, { "version_value" : "2.1.10", "version_affected" : "=" }, { "version_value" : "2.1.11", "version_affected" : "=" }, { "version_value" : "2.1.12", "version_affected" : "=" }, { "version_value" : "2.1.13", "version_affected" : "=" }, { "version_value" : "2.1.14", "version_affected" : "=" }, { "version_value" : "2.1.15", "version_affected" : "=" }, { "version_value" : "2.1.16", "version_affected" : "=" }, { "version_value" : "2.1.17", "version_affected" : "=" }, { "version_value" : "2.1.18", "version_affected" : "=" }, { "version_value" : "2.1.19", "version_affected" : "=" }, { "version_value" : "2.1.20", "version_affected" : "=" }, { "version_value" : "2.1.21", "version_affected" : "=" }, { "version_value" : "2.1.22", "version_affected" : "=" }, { "version_value" : "2.1.23", "version_affected" : "=" }, { "version_value" : "2.1.24", "version_affected" : "=" }, { "version_value" : "2.1.25", "version_affected" : "=" }, { "version_value" : "2.1.26", "version_affected" : "=" }, { "version_value" : "2.1.27", "version_affected" : "=" }, { "version_value" : "2.1.28", "version_affected" : "=" }, { "version_value" : "2.1.29", "version_affected" : "=" }, { "version_value" : "2.1.30", "version_affected" : "=" }, { "version_value" : "2.1.31", "version_affected" : "=" }, { "version_value" : "2.1.32", "version_affected" : "=" }, { "version_value" : "2.1.33", "version_affected" : "=" }, { "version_value" : "2.1.34", "version_affected" : "=" }, { "version_value" : "2.1.35", "version_affected" : "=" }, { "version_value" : "2.1.36", "version_affected" : "=" }, { "version_value" : "2.1.37", "version_affected" : "=" }, { "version_value" : "2.1.38", "version_affected" : "=" }, { "version_value" : "2.1.39", "version_affected" : "=" }, { "version_value" : "2.1.40", "version_affected" : "=" }, { "version_value" : "2.1.41", "version_affected" : "=" }, { "version_value" : "2.1.42", "version_affected" : "=" }, { "version_value" : "2.1.43", "version_affected" : "=" }, { "version_value" : "2.1.44", "version_affected" : "=" }, { "version_value" : "2.1.45", "version_affected" : "=" }, { "version_value" : "2.1.46", "version_affected" : "=" }, { "version_value" : "2.1.47", "version_affected" : "=" }, { "version_value" : "2.1.48", "version_affected" : "=" }, { "version_value" : "2.1.49", "version_affected" : "=" }, { "version_value" : "2.1.50", "version_affected" : "=" }, { "version_value" : "2.1.51", "version_affected" : "=" }, { "version_value" : "2.1.52", "version_affected" : "=" }, { "version_value" : "2.1.53", "version_affected" : "=" }, { "version_value" : "2.1.54", "version_affected" : "=" }, { "version_value" : "2.1.55", "version_affected" : "=" }, { "version_value" : "2.1.56", "version_affected" : "=" }, { "version_value" : "2.1.57", "version_affected" : "=" }, { "version_value" : "2.1.58", "version_affected" : "=" }, { "version_value" : "2.1.59", "version_affected" : "=" }, { "version_value" : "2.1.60", "version_affected" : "=" }, { "version_value" : "2.1.61", "version_affected" : "=" }, { "version_value" : "2.1.62", "version_affected" : "=" }, { "version_value" : "2.1.63", "version_affected" : "=" }, { "version_value" : "2.1.64", "version_affected" : "=" }, { "version_value" : "2.1.65", "version_affected" : "=" }, { "version_value" : "2.1.66", "version_affected" : "=" }, { "version_value" : "2.1.67", "version_affected" : "=" }, { "version_value" : "2.1.68", "version_affected" : "=" }, { "version_value" : "2.1.69", "version_affected" : "=" }, { "version_value" : "2.1.70", "version_affected" : "=" }, { "version_value" : "2.1.71", "version_affected" : "=" }, { "version_value" : "2.1.72", "version_affected" : "=" }, { "version_value" : "2.1.73", "version_affected" : "=" }, { "version_value" : "2.1.74", "version_affected" : "=" }, { "version_value" : "2.1.75", "version_affected" : "=" }, { "version_value" : "2.1.76", "version_affected" : "=" }, { "version_value" : "2.1.77", "version_affected" : "=" }, { "version_value" : "2.1.78", "version_affected" : "=" }, { "version_value" : "2.1.79", "version_affected" : "=" }, { "version_value" : "2.1.80", "version_affected" : "=" }, { "version_value" : "2.1.81", "version_affected" : "=" }, { "version_value" : "2.1.82", "version_affected" : "=" }, { "version_value" : "2.1.83", "version_affected" : "=" }, { "version_value" : "2.1.84", "version_affected" : "=" }, { "version_value" : "2.1.85", "version_affected" : "=" }, { "version_value" : "2.1.86", "version_affected" : "=" }, { "version_value" : "2.1.87", "version_affected" : "=" }, { "version_value" : "2.1.88", "version_affected" : "=" }, { "version_value" : "2.1.89", "version_affected" : "=" }, { "version_value" : "2.1.90", "version_affected" : "=" }, { "version_value" : "2.1.91", "version_affected" : "=" }, { "version_value" : "2.1.92", "version_affected" : "=" }, { "version_value" : "2.1.93", "version_affected" : "=" }, { "version_value" : "2.1.94", "version_affected" : "=" }, { "version_value" : "2.1.95", "version_affected" : "=" }, { "version_value" : "2.1.96", "version_affected" : "=" }, { "version_value" : "2.1.97", "version_affected" : "=" }, { "version_value" : "2.1.98", "version_affected" : "=" }, { "version_value" : "2.1.99", "version_affected" : "=" }, { "version_value" : "2.1.100", "version_affected" : "=" }, { "version_value" : "2.1.101", "version_affected" : "=" }, { "version_value" : "2.1.102", "version_affected" : "=" }, { "version_value" : "2.1.103", "version_affected" : "=" }, { "version_value" : "2.1.104", "version_affected" : "=" }, { "version_value" : "2.1.105", "version_affected" : "=" }, { "version_value" : "2.1.106", "version_affected" : "=" }, { "version_value" : "2.1.107", "version_affected" : "=" }, { "version_value" : "2.1.108", "version_affected" : "=" }, { "version_value" : "2.1.109", "version_affected" : "=" }, { "version_value" : "2.1.110", "version_affected" : "=" }, { "version_value" : "2.1.111", "version_affected" : "=" }, { "version_value" : "2.1.112", "version_affected" : "=" }, { "version_value" : "2.1.113", "version_affected" : "=" }, { "version_value" : "2.1.114", "version_affected" : "=" }, { "version_value" : "2.1.115", "version_affected" : "=" }, { "version_value" : "2.1.116", "version_affected" : "=" }, { "version_value" : "2.1.117", "version_affected" : "=" }, { "version_value" : "2.1.118", "version_affected" : "=" }, { "version_value" : "2.1.119", "version_affected" : "=" }, { "version_value" : "2.1.120", "version_affected" : "=" }, { "version_value" : "2.1.121", "version_affected" : "=" }, { "version_value" : "2.1.122", "version_affected" : "=" }, { "version_value" : "2.1.123", "version_affected" : "=" }, { "version_value" : "2.1.124", "version_affected" : "=" }, { "version_value" : "2.1.125", "version_affected" : "=" }, { "version_value" : "2.1.126", "version_affected" : "=" }, { "version_value" : "2.1.127", "version_affected" : "=" }, { "version_value" : "2.1.128", "version_affected" : "=" }, { "version_value" : "2.1.129", "version_affected" : "=" }, { "version_value" : "2.1.130", "version_affected" : "=" }, { "version_value" : "2.1.131", "version_affected" : "=" }, { "version_value" : "2.1.132", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.2.15", "version_affected" : "=" }, { "version_value" : "2.2.16", "version_affected" : "=" }, { "version_value" : "2.2.17", "version_affected" : "=" }, { "version_value" : "2.2.18", "version_affected" : "=" }, { "version_value" : "2.2.19", "version_affected" : "=" }, { "version_value" : "2.2.20", "version_affected" : "=" }, { "version_value" : "2.2.21", "version_affected" : "=" }, { "version_value" : "2.2.22", "version_affected" : "=" }, { "version_value" : "2.2.23", "version_affected" : "=" }, { "version_value" : "2.2.24", "version_affected" : "=" }, { "version_value" : "2.2.25", "version_affected" : "=" }, { "version_value" : "2.2.26", "version_affected" : "=" }, { "version_value" : "2.2.27", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" }, { "version_value" : "2.3.7", "version_affected" : "=" }, { "version_value" : "2.3.8", "version_affected" : "=" }, { "version_value" : "2.3.9", "version_affected" : "=" }, { "version_value" : "2.3.10", "version_affected" : "=" }, { "version_value" : "2.3.11", "version_affected" : "=" }, { "version_value" : "2.3.12", "version_affected" : "=" }, { "version_value" : "2.3.13", "version_affected" : "=" }, { "version_value" : "2.3.14", "version_affected" : "=" }, { "version_value" : "2.3.15", "version_affected" : "=" }, { "version_value" : "2.3.16", "version_affected" : "=" }, { "version_value" : "2.3.17", "version_affected" : "=" }, { "version_value" : "2.3.18", "version_affected" : "=" }, { "version_value" : "2.3.19", "version_affected" : "=" }, { "version_value" : "2.3.20", "version_affected" : "=" }, { "version_value" : "2.3.21", "version_affected" : "=" }, { "version_value" : "2.3.22", "version_affected" : "=" }, { "version_value" : "2.3.23", "version_affected" : "=" }, { "version_value" : "2.3.24", "version_affected" : "=" }, { "version_value" : "2.3.25", "version_affected" : "=" }, { "version_value" : "2.3.26", "version_affected" : "=" }, { "version_value" : "2.3.27", "version_affected" : "=" }, { "version_value" : "2.3.28", "version_affected" : "=" }, { "version_value" : "2.3.29", "version_affected" : "=" }, { "version_value" : "2.3.30", "version_affected" : "=" }, { "version_value" : "2.3.31", "version_affected" : "=" }, { "version_value" : "2.3.32", "version_affected" : "=" }, { "version_value" : "2.3.33", "version_affected" : "=" }, { "version_value" : "2.3.34", "version_affected" : "=" }, { "version_value" : "2.3.35", "version_affected" : "=" }, { "version_value" : "2.3.36", "version_affected" : "=" }, { "version_value" : "2.3.37", "version_affected" : "=" }, { "version_value" : "2.3.38", "version_affected" : "=" }, { "version_value" : "2.3.39", "version_affected" : "=" }, { "version_value" : "2.3.40", "version_affected" : "=" }, { "version_value" : "2.3.41", "version_affected" : "=" }, { "version_value" : "2.3.42", "version_affected" : "=" }, { "version_value" : "2.3.43", "version_affected" : "=" }, { "version_value" : "2.3.44", "version_affected" : "=" }, { "version_value" : "2.3.45", "version_affected" : "=" }, { "version_value" : "2.3.46", "version_affected" : "=" }, { "version_value" : "2.3.47", "version_affected" : "=" }, { "version_value" : "2.3.48", "version_affected" : "=" }, { "version_value" : "2.3.49", "version_affected" : "=" }, { "version_value" : "2.3.50", "version_affected" : "=" }, { "version_value" : "2.3.51", "version_affected" : "=" }, { "version_value" : "2.3.99", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" }, { "version_value" : "2.4.7", "version_affected" : "=" }, { "version_value" : "2.4.8", "version_affected" : "=" }, { "version_value" : "2.4.9", "version_affected" : "=" }, { "version_value" : "2.4.10", "version_affected" : "=" }, { "version_value" : "2.4.11", "version_affected" : "=" }, { "version_value" : "2.4.12", "version_affected" : "=" }, { "version_value" : "2.4.13", "version_affected" : "=" }, { "version_value" : "2.4.14", "version_affected" : "=" }, { "version_value" : "2.4.15", "version_affected" : "=" }, { "version_value" : "2.4.16", "version_affected" : "=" }, { "version_value" : "2.4.17", "version_affected" : "=" }, { "version_value" : "2.4.18", "version_affected" : "=" }, { "version_value" : "2.4.19", "version_affected" : "=" }, { "version_value" : "2.4.20", "version_affected" : "=" }, { "version_value" : "2.4.21", "version_affected" : "=" }, { "version_value" : "2.4.22", "version_affected" : "=" }, { "version_value" : "2.4.23", "version_affected" : "=" }, { "version_value" : "2.4.24", "version_affected" : "=" }, { "version_value" : "2.4.25", "version_affected" : "=" }, { "version_value" : "2.4.26", "version_affected" : "=" }, { "version_value" : "2.4.27", "version_affected" : "=" }, { "version_value" : "2.4.28", "version_affected" : "=" }, { "version_value" : "2.4.29", "version_affected" : "=" }, { "version_value" : "2.4.30", "version_affected" : "=" }, { "version_value" : "2.4.31", "version_affected" : "=" }, { "version_value" : "2.4.32", "version_affected" : "=" }, { "version_value" : "2.4.33", "version_affected" : "=" }, { "version_value" : "2.4.33.1", "version_affected" : "=" }, { "version_value" : "2.4.33.2", "version_affected" : "=" }, { "version_value" : "2.4.33.3", "version_affected" : "=" }, { "version_value" : "2.4.33.4", "version_affected" : "=" }, { "version_value" : "2.4.33.5", "version_affected" : "=" }, { "version_value" : "2.4.34", "version_affected" : "=" }, { "version_value" : "2.4.34.1", "version_affected" : "=" }, { "version_value" : "2.4.34.2", "version_affected" : "=" }, { "version_value" : "2.4.35", "version_affected" : "=" }, { "version_value" : "2.4.35.2", "version_affected" : "=" }, { "version_value" : "2.4.37.6", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.5.10", "version_affected" : "=" }, { "version_value" : "2.5.11", "version_affected" : "=" }, { "version_value" : "2.5.12", "version_affected" : "=" }, { "version_value" : "2.5.13", "version_affected" : "=" }, { "version_value" : "2.5.14", "version_affected" : "=" }, { "version_value" : "2.5.15", "version_affected" : "=" }, { "version_value" : "2.5.16", "version_affected" : "=" }, { "version_value" : "2.5.17", "version_affected" : "=" }, { "version_value" : "2.5.18", "version_affected" : "=" }, { "version_value" : "2.5.19", "version_affected" : "=" }, { "version_value" : "2.5.20", "version_affected" : "=" }, { "version_value" : "2.5.21", "version_affected" : "=" }, { "version_value" : "2.5.22", "version_affected" : "=" }, { "version_value" : "2.5.23", "version_affected" : "=" }, { "version_value" : "2.5.24", "version_affected" : "=" }, { "version_value" : "2.5.25", "version_affected" : "=" }, { "version_value" : "2.5.26", "version_affected" : "=" }, { "version_value" : "2.5.27", "version_affected" : "=" }, { "version_value" : "2.5.28", "version_affected" : "=" }, { "version_value" : "2.5.29", "version_affected" : "=" }, { "version_value" : "2.5.30", "version_affected" : "=" }, { "version_value" : "2.5.31", "version_affected" : "=" }, { "version_value" : "2.5.32", "version_affected" : "=" }, { "version_value" : "2.5.33", "version_affected" : "=" }, { "version_value" : "2.5.34", "version_affected" : "=" }, { "version_value" : "2.5.35", "version_affected" : "=" }, { "version_value" : "2.5.36", "version_affected" : "=" }, { "version_value" : "2.5.37", "version_affected" : "=" }, { "version_value" : "2.5.38", "version_affected" : "=" }, { "version_value" : "2.5.39", "version_affected" : "=" }, { "version_value" : "2.5.40", "version_affected" : "=" }, { "version_value" : "2.5.41", "version_affected" : "=" }, { "version_value" : "2.5.42", "version_affected" : "=" }, { "version_value" : "2.5.43", "version_affected" : "=" }, { "version_value" : "2.5.44", "version_affected" : "=" }, { "version_value" : "2.5.45", "version_affected" : "=" }, { "version_value" : "2.5.46", "version_affected" : "=" }, { "version_value" : "2.5.47", "version_affected" : "=" }, { "version_value" : "2.5.48", "version_affected" : "=" }, { "version_value" : "2.5.49", "version_affected" : "=" }, { "version_value" : "2.5.50", "version_affected" : "=" }, { "version_value" : "2.5.51", "version_affected" : "=" }, { "version_value" : "2.5.52", "version_affected" : "=" }, { "version_value" : "2.5.53", "version_affected" : "=" }, { "version_value" : "2.5.54", "version_affected" : "=" }, { "version_value" : "2.5.55", "version_affected" : "=" }, { "version_value" : "2.5.56", "version_affected" : "=" }, { "version_value" : "2.5.57", "version_affected" : "=" }, { "version_value" : "2.5.58", "version_affected" : "=" }, { "version_value" : "2.5.59", "version_affected" : "=" }, { "version_value" : "2.5.60", "version_affected" : "=" }, { "version_value" : "2.5.61", "version_affected" : "=" }, { "version_value" : "2.5.62", "version_affected" : "=" }, { "version_value" : "2.5.63", "version_affected" : "=" }, { "version_value" : "2.5.64", "version_affected" : "=" }, { "version_value" : "2.5.65", "version_affected" : "=" }, { "version_value" : "2.5.66", "version_affected" : "=" }, { "version_value" : "2.5.67", "version_affected" : "=" }, { "version_value" : "2.5.68", "version_affected" : "=" }, { "version_value" : "2.5.69", "version_affected" : "=" }, { "version_value" : "2.5.75", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.15.8", "version_affected" : "=" }, { "version_value" : "2.6.15.9", "version_affected" : "=" }, { "version_value" : "2.6.15.10", "version_affected" : "=" }, { "version_value" : "2.6.15.11", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.0", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "=" }, { "version_value" : "2.6.27", "version_affected" : "=" }, { "version_value" : "2.6.27.1", "version_affected" : "=" }, { "version_value" : "2.6.27.2", "version_affected" : "=" }, { "version_value" : "2.6.27.3", "version_affected" : "=" }, { "version_value" : "2.6.27.4", "version_affected" : "=" }, { "version_value" : "2.6.27.5", "version_affected" : "=" }, { "version_value" : "2.6.27.6", "version_affected" : "=" }, { "version_value" : "2.6.27.7", "version_affected" : "=" }, { "version_value" : "2.6.27.8", "version_affected" : "=" }, { "version_value" : "2.6.27.9", "version_affected" : "=" }, { "version_value" : "2.6.27.10", "version_affected" : "=" }, { "version_value" : "2.6.27.11", "version_affected" : "=" }, { "version_value" : "2.6.27.12", "version_affected" : "=" }, { "version_value" : "2.6.27.13", "version_affected" : "=" }, { "version_value" : "2.6.27.14", "version_affected" : "=" }, { "version_value" : "2.6.27.15", "version_affected" : "=" }, { "version_value" : "2.6.27.16", "version_affected" : "=" }, { "version_value" : "2.6.27.17", "version_affected" : "=" }, { "version_value" : "2.6.27.18", "version_affected" : "=" }, { "version_value" : "2.6.27.19", "version_affected" : "=" }, { "version_value" : "2.6.27.20", "version_affected" : "=" }, { "version_value" : "2.6.27.21", "version_affected" : "=" }, { "version_value" : "2.6.27.22", "version_affected" : "=" }, { "version_value" : "2.6.27.23", "version_affected" : "=" }, { "version_value" : "2.6.27.24", "version_affected" : "=" }, { "version_value" : "2.6.27.25", "version_affected" : "=" }, { "version_value" : "2.6.27.26", "version_affected" : "=" }, { "version_value" : "2.6.27.27", "version_affected" : "=" }, { "version_value" : "2.6.27.28", "version_affected" : "=" }, { "version_value" : "2.6.27.29", "version_affected" : "=" }, { "version_value" : "2.6.27.30", "version_affected" : "=" }, { "version_value" : "2.6.27.31", "version_affected" : "=" }, { "version_value" : "2.6.27.32", "version_affected" : "=" }, { "version_value" : "2.6.27.33", "version_affected" : "=" }, { "version_value" : "2.6.27.34", "version_affected" : "=" }, { "version_value" : "2.6.27.35", "version_affected" : "=" }, { "version_value" : "2.6.27.36", "version_affected" : "=" }, { "version_value" : "2.6.27.37", "version_affected" : "=" }, { "version_value" : "2.6.27.38", "version_affected" : "=" }, { "version_value" : "2.6.27.39", "version_affected" : "=" }, { "version_value" : "2.6.27.40", "version_affected" : "=" }, { "version_value" : "2.6.27.41", "version_affected" : "=" }, { "version_value" : "2.6.27.42", "version_affected" : "=" }, { "version_value" : "2.6.27.43", "version_affected" : "=" }, { "version_value" : "2.6.27.44", "version_affected" : "=" }, { "version_value" : "2.6.27.45", "version_affected" : "=" }, { "version_value" : "2.6.27.46", "version_affected" : "=" }, { "version_value" : "2.6.27.47", "version_affected" : "=" }, { "version_value" : "2.6.27.48", "version_affected" : "=" }, { "version_value" : "2.6.27.49", "version_affected" : "=" }, { "version_value" : "2.6.27.50", "version_affected" : "=" }, { "version_value" : "2.6.27.51", "version_affected" : "=" }, { "version_value" : "2.6.27.52", "version_affected" : "=" }, { "version_value" : "2.6.27.53", "version_affected" : "=" }, { "version_value" : "2.6.27.54", "version_affected" : "=" }, { "version_value" : "2.6.27.55", "version_affected" : "=" }, { "version_value" : "2.6.27.56", "version_affected" : "=" }, { "version_value" : "2.6.27.57", "version_affected" : "=" }, { "version_value" : "2.6.27.58", "version_affected" : "=" }, { "version_value" : "2.6.27.59", "version_affected" : "=" }, { "version_value" : "2.6.27.60", "version_affected" : "=" }, { "version_value" : "2.6.27.61", "version_affected" : "=" }, { "version_value" : "2.6.27.62", "version_affected" : "=" }, { "version_value" : "2.6.28", "version_affected" : "=" }, { "version_value" : "2.6.28.1", "version_affected" : "=" }, { "version_value" : "2.6.28.2", "version_affected" : "=" }, { "version_value" : "2.6.28.3", "version_affected" : "=" }, { "version_value" : "2.6.28.4", "version_affected" : "=" }, { "version_value" : "2.6.28.5", "version_affected" : "=" }, { "version_value" : "2.6.28.6", "version_affected" : "=" }, { "version_value" : "2.6.28.7", "version_affected" : "=" }, { "version_value" : "2.6.28.8", "version_affected" : "=" }, { "version_value" : "2.6.28.9", "version_affected" : "=" }, { "version_value" : "2.6.28.10", "version_affected" : "=" }, { "version_value" : "2.6.29", "version_affected" : "=" }, { "version_value" : "2.6.29.1", "version_affected" : "=" }, { "version_value" : "2.6.29.2", "version_affected" : "=" }, { "version_value" : "2.6.29.3", "version_affected" : "=" }, { "version_value" : "2.6.29.4", "version_affected" : "=" }, { "version_value" : "2.6.29.5", "version_affected" : "=" }, { "version_value" : "2.6.29.6", "version_affected" : "=" }, { "version_value" : "2.6.30", "version_affected" : "=" }, { "version_value" : "2.6.30.1", "version_affected" : "=" }, { "version_value" : "2.6.30.2", "version_affected" : "=" }, { "version_value" : "2.6.30.3", "version_affected" : "=" }, { "version_value" : "2.6.30.4", "version_affected" : "=" }, { "version_value" : "2.6.30.5", "version_affected" : "=" }, { "version_value" : "2.6.30.6", "version_affected" : "=" }, { "version_value" : "2.6.30.7", "version_affected" : "=" }, { "version_value" : "2.6.30.8", "version_affected" : "=" }, { "version_value" : "2.6.30.9", "version_affected" : "=" }, { "version_value" : "2.6.30.10", "version_affected" : "=" }, { "version_value" : "2.6.31", "version_affected" : "=" }, { "version_value" : "2.6.31.1", "version_affected" : "=" }, { "version_value" : "2.6.31.2", "version_affected" : "=" }, { "version_value" : "2.6.31.3", "version_affected" : "=" }, { "version_value" : "2.6.31.4", "version_affected" : "=" }, { "version_value" : "2.6.31.5", "version_affected" : "=" }, { "version_value" : "2.6.31.6", "version_affected" : "=" }, { "version_value" : "2.6.31.7", "version_affected" : "=" }, { "version_value" : "2.6.31.8", "version_affected" : "=" }, { "version_value" : "2.6.31.9", "version_affected" : "=" }, { "version_value" : "2.6.31.10", "version_affected" : "=" }, { "version_value" : "2.6.31.11", "version_affected" : "=" }, { "version_value" : "2.6.31.12", "version_affected" : "=" }, { "version_value" : "2.6.31.13", "version_affected" : "=" }, { "version_value" : "2.6.31.14", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" }, { "version_value" : "2.6.32.4", "version_affected" : "=" }, { "version_value" : "2.6.32.5", "version_affected" : "=" }, { "version_value" : "2.6.32.6", "version_affected" : "=" }, { "version_value" : "2.6.32.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f98bfbd78c37c5946cc53089da32a5f741efdeb7", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=f98bfbd78c37c5946cc53089da32a5f741efdeb7", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html", "name" : "FEDORA-2010-1804", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html", "name" : "FEDORA-2010-1787", "refsource" : "FEDORA", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html", "name" : "SUSE-SA:2010:014", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html", "name" : "SUSE-SA:2010:018", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00007.html", "name" : "SUSE-SA:2010:019", "refsource" : "SUSE", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38557", "name" : "38557", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38779", "name" : "38779", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/38922", "name" : "38922", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39649", "name" : "39649", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/39742", "name" : "39742", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://support.avaya.com/css/P8/documents/100088287", "name" : "http://support.avaya.com/css/P8/documents/100088287", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.debian.org/security/2010/dsa-2005", "name" : "DSA-2005", "refsource" : "DEBIAN", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.32.8", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:088", "name" : "MDVSA-2010:088", "refsource" : "MANDRIVA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.novell.com/linux/security/advisories/2010_23_kernel.html", "name" : "SUSE-SA:2010:023", "refsource" : "SUSE", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/03/1", "name" : "[oss-security] 20100203 CVE request: kernel OOM/crash in drivers/connector", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/03/3", "name" : "[oss-security] 20100203 Re: CVE request: kernel OOM/crash in drivers/connector", "refsource" : "MLIST", "tags" : [ "Mailing List", "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0398.html", "name" : "RHSA-2010:0398", "refsource" : "REDHAT", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/38058", "name" : "38058", "refsource" : "BID", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.ubuntu.com/usn/USN-914-1", "name" : "USN-914-1", "refsource" : "UBUNTU", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0638", "name" : "ADV-2010-0638", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=561682", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=561682", "refsource" : "CONFIRM", "tags" : [ "Issue Tracking", "Third Party Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10903", "name" : "oval:org.mitre.oval:def:10903", "refsource" : "OVAL", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "drivers/connector/connector.c in the Linux kernel before 2.6.32.8 allows local users to cause a denial of service (memory consumption and system crash) by sending the kernel many NETLINK_CONNECTOR messages." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndExcluding" : "2.6.32.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:debian:debian_linux:5.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.04:*:*:*:lts:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.04:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:canonical:ubuntu_linux:9.10:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-22T13:00Z", "lastModifiedDate" : "2018-11-16T16:06Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0411", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "systemtap", "product" : { "product_data" : [ { "product_name" : "systemtap", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html", "name" : "FEDORA-2010-1373", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html", "name" : "FEDORA-2010-1720", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html", "name" : "SUSE-SR:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126530657715364&w=2", "name" : "[oss-security] 20100204 systemtap DoS issue (CVE-2010-0411)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38426", "name" : "38426", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38680", "name" : "38680", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38765", "name" : "38765", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38817", "name" : "38817", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39656", "name" : "39656", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023664", "name" : "1023664", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sourceware.org/bugzilla/show_bug.cgi?id=11234", "name" : "http://sourceware.org/bugzilla/show_bug.cgi?id=11234", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://sourceware.org/git/gitweb.cgi?p=systemtap.git;a=commit;h=a2d399c87a642190f08ede63dc6fc434a5a8363a", "name" : "http://sourceware.org/git/gitweb.cgi?p=systemtap.git;a=commit;h=a2d399c87a642190f08ede63dc6fc434a5a8363a", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0124.html", "name" : "RHSA-2010:0124", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0125.html", "name" : "RHSA-2010:0125", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38120", "name" : "38120", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1001", "name" : "ADV-2010-1001", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559719", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559719", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9675", "name" : "oval:org.mitre.oval:def:9675", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple integer signedness errors in the (1) __get_argv and (2) __get_compat_argv functions in tapset/aux_syscalls.stp in SystemTap 1.1 allow local users to cause a denial of service (script crash, or system crash or hang) via a process with a large number of arguments, leading to a buffer overflow." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:systemtap:systemtap:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-08T20:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0412", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "systemtap", "product" : { "product_data" : [ { "product_name" : "systemtap", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035201.html", "name" : "FEDORA-2010-1373", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035261.html", "name" : "FEDORA-2010-1720", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/scm-commits/2010-February/394714.html", "name" : "[scm-commits] 20100215 rpms/systemtap/devel systemtap-1.1-tighten-server-params.patch, NONE, 1.1 systemtap.spec, 1.59, 1.60", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38316", "name" : "38316", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56611", "name" : "systemtap-stapserver-unspecified(56611)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "stap-server in SystemTap 1.1 does not properly restrict the value of the -B (aka BUILD) option, which allows attackers to have an unspecified impact via vectors associated with executing the make program, a different vulnerability than CVE-2009-4273." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:systemtap:systemtap:1.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T00:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0414", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "screensaver", "version" : { "version_data" : [ { "version_value" : "2.13", "version_affected" : "=" }, { "version_value" : "2.20", "version_affected" : "=" }, { "version_value" : "2.20.0", "version_affected" : "=" }, { "version_value" : "2.26.1", "version_affected" : "=" }, { "version_value" : "2.28.0", "version_affected" : "=" }, { "version_value" : "2.28.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news", "name" : "http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.2.news", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=a5f66339be6719c2b8fc478a1d5fc6545297d950", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=dcca89b7ab6e1220815af38da246434b2e13fd9f", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/034904.html", "name" : "FEDORA-2010-1556", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38468", "name" : "38468", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38532", "name" : "38532", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38534", "name" : "38534", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:040", "name" : "MDVSA-2010:040", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62219", "name" : "62219", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38149", "name" : "38149", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-898-1", "name" : "USN-898-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=609337", "name" : "https://bugzilla.gnome.org/show_bug.cgi?id=609337", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=562217", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=562217", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gnome-screensaver before 2.28.2 allows physically proximate attackers to bypass screen locking and access an unattended workstation by moving the mouse position to an external monitor and then disconnecting that monitor." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.20.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.26.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.28.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-11T20:30Z", "lastModifiedDate" : "2010-02-26T07:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0415", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.32", "version_affected" : "=" }, { "version_value" : "2.6.32.1", "version_affected" : "=" }, { "version_value" : "2.6.32.2", "version_affected" : "=" }, { "version_value" : "2.6.32.3", "version_affected" : "=" }, { "version_value" : "2.6.32.4", "version_affected" : "=" }, { "version_value" : "2.6.33", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=6f5a55f1a6c5abee15a0e878e5c74d9f1569b8b0", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035070.html", "name" : "FEDORA-2010-1804", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035159.html", "name" : "FEDORA-2010-1787", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00000.html", "name" : "SUSE-SA:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00006.html", "name" : "SUSE-SA:2010:018", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38492", "name" : "38492", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38557", "name" : "38557", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38779", "name" : "38779", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38922", "name" : "38922", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-1996", "name" : "DSA-1996", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2005", "name" : "DSA-2005", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/testing/ChangeLog-2.6.33-rc7", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:066", "name" : "MDVSA-2010:066", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:198", "name" : "MDVSA-2010:198", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/07/1", "name" : "[oss-security] 20100207 CVE request: information leak / potential crash in sys_move_pages", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/07/2", "name" : "[oss-security] 20100207 Re: CVE request: information leak / potential crash in sys_move_pages", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/08/2", "name" : "[oss-security] 20100208 Re: CVE request: information leak / potential crash in sys_move_pages", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0147.html", "name" : "RHSA-2010:0147", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38144", "name" : "38144", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-914-1", "name" : "USN-914-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0638", "name" : "ADV-2010-0638", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=562582", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=562582", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9399", "name" : "oval:org.mitre.oval:def:9399", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The do_pages_move function in mm/migrate.c in the Linux kernel before 2.6.33-rc7 does not validate node values, which allows local users to read arbitrary kernel memory locations, cause a denial of service (OOPS), and possibly have unspecified other impact by specifying a node that is not part of the kernel's node set." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.32.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:rc3:*:*:*:*:*:*", "versionEndIncluding" : "2.6.33" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.33:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:rc6:*:*:*:*:*:*", "versionEndIncluding" : "2.6.33" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-17T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0416", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "helix_player", "version" : { "version_data" : [ { "version_value" : "1.0.6", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.helixcommunity.org/pipermail/common-cvs/2007-July/014956.html", "name" : "[common-cvs] 20070703 util hxurl.cpp,1.24.4.1,1.24.4.1.4.1", "refsource" : "MLIST", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38450", "name" : "38450", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0094.html", "name" : "RHSA-2010:0094", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=561856", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=561856", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://helixcommunity.org/viewcvs/common/util/hxurl.cpp?view=log#rev1.24.4.1.4.1", "name" : "https://helixcommunity.org/viewcvs/common/util/hxurl.cpp?view=log#rev1.24.4.1.4.1", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10847", "name" : "oval:org.mitre.oval:def:10847", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in the Unescape function in common/util/hxurl.cpp and player/hxclientkit/src/CHXClientSink.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a URL argument containing a % (percent) character that is not followed by two hex digits." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:helix_player:1.0.6:*:linux:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:*:*:linux:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-18T23:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0417", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "realnetworks", "product" : { "product_data" : [ { "product_name" : "helix_player", "version" : { "version_data" : [ { "version_value" : "1.0.6", "version_affected" : "=" } ] } }, { "product_name" : "realplayer", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.helixcommunity.org/pipermail/common-cvs/2008-January/015484.html", "name" : "[common-cvs] 20080114 util rlstate.cpp,1.9,1.10", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38450", "name" : "38450", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0094.html", "name" : "RHSA-2010:0094", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=561860", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=561860", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://helixcommunity.org/viewcvs/common/util/rlstate.cpp?view=log#rev1.10", "name" : "https://helixcommunity.org/viewcvs/common/util/rlstate.cpp?view=log#rev1.10", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11364", "name" : "oval:org.mitre.oval:def:11364", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in common/util/rlstate.cpp in Helix Player 1.0.6 and RealPlayer allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a RuleBook structure with a large number of rule-separator characters that trigger heap memory corruption." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:helix_player:1.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:realnetworks:realplayer:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-18T23:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0418", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chumby", "product" : { "product_data" : [ { "product_name" : "chumby_classic", "version" : { "version_data" : [ { "version_value" : "0.9", "version_affected" : "=" }, { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.4", "version_affected" : "=" }, { "version_value" : "1.5", "version_affected" : "=" }, { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.7", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "<=" } ] } }, { "product_name" : "chumby_one", "version" : { "version_data" : [ { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-78" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38972", "name" : "38972", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.awe.com/mark/blog/20100305.html", "name" : "http://www.awe.com/mark/blog/20100305.html", "refsource" : "MISC", "tags" : [ "Patch" ] }, { "url" : "http://www.chumby.com/pages/release10mar", "name" : "http://www.chumby.com/pages/release10mar", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The web interface in chumby one before 1.0.4 and chumby classic before 1.7.2 allows remote attackers to execute arbitrary commands via shell metacharacters in a request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_one:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_one:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:chumby:chumby_classic:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.7.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-10T20:13Z", "lastModifiedDate" : "2010-03-31T05:41Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0419", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kvm_qumranet", "product" : { "product_data" : [ { "product_name" : "kvm", "version" : { "version_data" : [ { "version_value" : "83", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023663", "name" : "1023663", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0126.html", "name" : "RHSA-2010:0126", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38467", "name" : "38467", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=563463", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=563463", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56662", "name" : "kernel-selectors-privilege-escalation(56662)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10139", "name" : "oval:org.mitre.oval:def:10139", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The x86 emulator in KVM 83, when a guest is configured for Symmetric Multiprocessing (SMP), does not properly restrict writing of segment selectors to segment registers, which might allow guest OS users to cause a denial of service (guest OS crash) or gain privileges on the guest OS by leveraging access to a (1) IO port or (2) MMIO region, and replacing an instruction in between emulator entry and instruction fetch." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kvm_qumranet:kvm:83:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T16:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0420", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://developer.pidgin.im/wiki/ChangeLog", "name" : "http://developer.pidgin.im/wiki/ChangeLog", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html", "name" : "FEDORA-2010-1279", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html", "name" : "FEDORA-2010-1934", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html", "name" : "FEDORA-2010-1383", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://pidgin.im/news/security/?id=44", "name" : "http://pidgin.im/news/security/?id=44", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38563", "name" : "38563", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38640", "name" : "38640", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38658", "name" : "38658", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38712", "name" : "38712", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39509", "name" : "39509", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2038", "name" : "DSA-2038", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:041", "name" : "MDVSA-2010:041", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085", "name" : "MDVSA-2010:085", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62439", "name" : "62439", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38294", "name" : "38294", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-902-1", "name" : "USN-902-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0413", "name" : "ADV-2010-0413", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0914", "name" : "ADV-2010-0914", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1020", "name" : "ADV-2010-1020", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=565786", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=565786", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56399", "name" : "pidgin-xmpp-nickname-dos(56399)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11485", "name" : "oval:org.mitre.oval:def:11485", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A18230", "name" : "oval:org.mitre.oval:def:18230", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0115.html", "name" : "RHSA-2010:0115", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libpurple in Finch in Pidgin before 2.6.6, when an XMPP multi-user chat (MUC) room is used, does not properly parse nicknames containing
sequences, which allows remote attackers to cause a denial of service (application crash) via a crafted nickname." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-24T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0421", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pango", "product" : { "product_data" : [ { "product_name" : "pango", "version" : { "version_data" : [ { "version_value" : "1.27", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2", "name" : "http://ftp.gnome.org/pub/GNOME/sources/pango/1.27/pango-1.27.1.tar.bz2", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html", "name" : "SUSE-SR:2010:009", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00002.html", "name" : "SUSE-SR:2010:012", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-06/msg00001.html", "name" : "SUSE-SR:2010:013", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39041", "name" : "39041", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023711", "name" : "1023711", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2019", "name" : "DSA-2019", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:121", "name" : "MDVSA-2010:121", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0140.html", "name" : "RHSA-2010:0140", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38760", "name" : "38760", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0627", "name" : "ADV-2010-0627", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0661", "name" : "ADV-2010-0661", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1552", "name" : "ADV-2010-1552", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=555831", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=555831", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9417", "name" : "oval:org.mitre.oval:def:9417", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Array index error in the hb_ot_layout_build_glyph_classes function in pango/opentype/hb-ot-layout.cc in Pango before 1.27.1 allows context-dependent attackers to cause a denial of service (application crash) via a crafted font file, related to building a synthetic Glyph Definition (aka GDEF) table by using this font's charmap and the Unicode property database." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pango:pango:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.27" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-18T17:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0422", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "gnome", "product" : { "product_data" : [ { "product_name" : "screensaver", "version" : { "version_data" : [ { "version_value" : "2.28.0", "version_affected" : "=" }, { "version_value" : "2.28.1", "version_affected" : "=" }, { "version_value" : "2.28.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news", "name" : "http://ftp.gnome.org/pub/GNOME/sources/gnome-screensaver/2.28/gnome-screensaver-2.28.3.news", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=271ae93d7b140b8ba40d77f9e4ce894e5fd1b554", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=d4dcbd65a2df3c093c4e3a74bbbc75383eb9eadb", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685", "name" : "http://git.gnome.org/browse/gnome-screensaver/commit/?id=f93a22c175090cf02e80bc3ee676b53f1251f685", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035115.html", "name" : "FEDORA-2010-1855", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=oss-security&m=126601292400764&w=2", "name" : "[oss-security] 20100212 Re: gnome-screensaver vulnerability (CVE-2010-0414)", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38565", "name" : "38565", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38583", "name" : "38583", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38248", "name" : "38248", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.gnome.org/show_bug.cgi?id=609789", "name" : "https://bugzilla.gnome.org/show_bug.cgi?id=609789", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=564464", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=564464", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56364", "name" : "gnome-screensaver-monitor-sec-bypass(56364)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gnome-screensaver 2.28.x before 2.28.3 does not properly synchronize the state of screen locking and the unlock dialog in situations involving a change to the number of monitors, which allows physically proximate attackers to bypass screen locking and access an unattended workstation by connecting and disconnecting monitors multiple times, a related issue to CVE-2010-0414." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:gnome:screensaver:2.28.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:H/Au:N/C:N/I:C/A:N", "accessVector" : "LOCAL", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 1.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-24T18:30Z", "lastModifiedDate" : "2017-08-17T01:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0423", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "pidgin", "product" : { "product_data" : [ { "product_name" : "pidgin", "version" : { "version_data" : [ { "version_value" : "2.0.0", "version_affected" : "=" }, { "version_value" : "2.0.1", "version_affected" : "=" }, { "version_value" : "2.0.2", "version_affected" : "=" }, { "version_value" : "2.1.0", "version_affected" : "=" }, { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.4.0", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.5.0", "version_affected" : "=" }, { "version_value" : "2.5.1", "version_affected" : "=" }, { "version_value" : "2.5.2", "version_affected" : "=" }, { "version_value" : "2.5.3", "version_affected" : "=" }, { "version_value" : "2.5.4", "version_affected" : "=" }, { "version_value" : "2.5.5", "version_affected" : "=" }, { "version_value" : "2.5.6", "version_affected" : "=" }, { "version_value" : "2.5.7", "version_affected" : "=" }, { "version_value" : "2.5.8", "version_affected" : "=" }, { "version_value" : "2.5.9", "version_affected" : "=" }, { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://developer.pidgin.im/wiki/ChangeLog", "name" : "http://developer.pidgin.im/wiki/ChangeLog", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035332.html", "name" : "FEDORA-2010-1279", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035347.html", "name" : "FEDORA-2010-1934", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035409.html", "name" : "FEDORA-2010-1383", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://pidgin.im/news/security/?id=45", "name" : "http://pidgin.im/news/security/?id=45", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38563", "name" : "38563", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38640", "name" : "38640", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38658", "name" : "38658", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38712", "name" : "38712", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39509", "name" : "39509", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2038", "name" : "DSA-2038", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:041", "name" : "MDVSA-2010:041", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:085", "name" : "MDVSA-2010:085", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62440", "name" : "62440", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38294", "name" : "38294", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-902-1", "name" : "USN-902-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0413", "name" : "ADV-2010-0413", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0914", "name" : "ADV-2010-0914", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1020", "name" : "ADV-2010-1020", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=565792", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=565792", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56394", "name" : "pidgin-smileys-dos(56394)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17554", "name" : "oval:org.mitre.oval:def:17554", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9842", "name" : "oval:org.mitre.oval:def:9842", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0115.html", "name" : "RHSA-2010:0115", "refsource" : "REDHAT", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "gtkimhtml.c in Pidgin before 2.6.6 allows remote attackers to cause a denial of service (CPU consumption and application hang) by sending many smileys in a (1) IM or (2) chat." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.5.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:pidgin:pidgin:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.5" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-24T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0424", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fedorahosted", "product" : { "product_data" : [ { "product_name" : "cronie", "version" : { "version_data" : [ { "version_value" : "1.4.3", "version_affected" : "<=" } ] } } ] } }, { "vendor_name" : "paul_vixie", "product" : { "product_data" : [ { "product_name" : "vixie_cron", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://git.fedorahosted.org/git/cronie.git?p=cronie.git;a=commit;h=9e4a8fa5f9171fb724981f53879c9b20264aeb61", "name" : "http://git.fedorahosted.org/git/cronie.git?p=cronie.git;a=commit;h=9e4a8fa5f9171fb724981f53879c9b20264aeb61", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-February/035762.html", "name" : "FEDORA-2010-2751", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38700", "name" : "38700", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38741", "name" : "38741", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/48104", "name" : "48104", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38391", "name" : "38391", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=565809", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=565809", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The edit_cmd function in crontab.c in (1) cronie before 1.4.4 and (2) Vixie cron (vixie-cron) allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fedorahosted:cronie:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:paul_vixie:vixie_cron:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 3.3 }, "severity" : "LOW", "exploitabilityScore" : 3.4, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T19:30Z", "lastModifiedDate" : "2018-01-06T02:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0425", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "http_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "2.0.9", "version_affected" : "=" }, { "version_value" : "2.0.28", "version_affected" : "=" }, { "version_value" : "2.0.32", "version_affected" : "=" }, { "version_value" : "2.0.34", "version_affected" : "=" }, { "version_value" : "2.0.35", "version_affected" : "=" }, { "version_value" : "2.0.36", "version_affected" : "=" }, { "version_value" : "2.0.37", "version_affected" : "=" }, { "version_value" : "2.0.38", "version_affected" : "=" }, { "version_value" : "2.0.39", "version_affected" : "=" }, { "version_value" : "2.0.40", "version_affected" : "=" }, { "version_value" : "2.0.41", "version_affected" : "=" }, { "version_value" : "2.0.42", "version_affected" : "=" }, { "version_value" : "2.0.43", "version_affected" : "=" }, { "version_value" : "2.0.44", "version_affected" : "=" }, { "version_value" : "2.0.45", "version_affected" : "=" }, { "version_value" : "2.0.46", "version_affected" : "=" }, { "version_value" : "2.0.47", "version_affected" : "=" }, { "version_value" : "2.0.48", "version_affected" : "=" }, { "version_value" : "2.0.49", "version_affected" : "=" }, { "version_value" : "2.0.50", "version_affected" : "=" }, { "version_value" : "2.0.51", "version_affected" : "=" }, { "version_value" : "2.0.52", "version_affected" : "=" }, { "version_value" : "2.0.53", "version_affected" : "=" }, { "version_value" : "2.0.54", "version_affected" : "=" }, { "version_value" : "2.0.55", "version_affected" : "=" }, { "version_value" : "2.0.56", "version_affected" : "=" }, { "version_value" : "2.0.57", "version_affected" : "=" }, { "version_value" : "2.0.58", "version_affected" : "=" }, { "version_value" : "2.0.59", "version_affected" : "=" }, { "version_value" : "2.0.60", "version_affected" : "=" }, { "version_value" : "2.0.61", "version_affected" : "=" }, { "version_value" : "2.0.63", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.10", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" }, { "version_value" : "2.3.0", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.3.5", "version_affected" : "=" }, { "version_value" : "2.3.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://httpd.apache.org/security/vulnerabilities_20.html", "name" : "http://httpd.apache.org/security/vulnerabilities_20.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://httpd.apache.org/security/vulnerabilities_22.html", "name" : "http://httpd.apache.org/security/vulnerabilities_22.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000105.html", "name" : "[security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38978", "name" : "38978", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39628", "name" : "39628", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870", "name" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/CHANGES?r1=917870&r2=917869&pathrev=917870", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870", "name" : "http://svn.apache.org/viewvc/httpd/httpd/trunk/modules/arch/win32/mod_isapi.c?r1=917870&r2=917869&pathrev=917870", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=917870", "name" : "http://svn.apache.org/viewvc?view=revision&revision=917870", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/280613", "name" : "VU#280613", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38494", "name" : "38494", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.securitytracker.com/id?1023701", "name" : "1023701", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.senseofsecurity.com.au/advisories/SOS-10-002", "name" : "http://www.senseofsecurity.com.au/advisories/SOS-10-002", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0634", "name" : "ADV-2010-0634", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0994", "name" : "ADV-2010-0994", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM09447", "name" : "PM09447", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247", "name" : "PM12247", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56624", "name" : "apache-http-modisapi-ocp-unspecified(56624)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8439", "name" : "oval:org.mitre.oval:def:8439", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.exploit-db.com/exploits/11650", "name" : "https://www.exploit-db.com/exploits/11650", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "modules/arch/win32/mod_isapi.c in mod_isapi in the Apache HTTP Server 2.0.37 through 2.0.63, 2.2.0 through 2.2.14, and 2.3.x before 2.3.7, when running on Windows, does not ensure that request processing is complete before calling isapi_unload for an ISAPI .dll module, which allows remote attackers to execute arbitrary code via unspecified vectors related to a crafted request, a reset packet, and \"orphaned callback pointers.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.3.6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.28:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.32:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.34:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.0.63:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.14:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T19:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0426", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "todd_miller", "product" : { "product_data" : [ { "product_name" : "sudo", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.3_p1", "version_affected" : "=" }, { "version_value" : "1.6.3_p2", "version_affected" : "=" }, { "version_value" : "1.6.3_p3", "version_affected" : "=" }, { "version_value" : "1.6.3_p4", "version_affected" : "=" }, { "version_value" : "1.6.3_p5", "version_affected" : "=" }, { "version_value" : "1.6.3_p6", "version_affected" : "=" }, { "version_value" : "1.6.3_p7", "version_affected" : "=" }, { "version_value" : "1.6.4_p1", "version_affected" : "=" }, { "version_value" : "1.6.4_p2", "version_affected" : "=" }, { "version_value" : "1.6.5_p1", "version_affected" : "=" }, { "version_value" : "1.6.5_p2", "version_affected" : "=" }, { "version_value" : "1.6.7_p5", "version_affected" : "=" }, { "version_value" : "1.6.8_p1", "version_affected" : "=" }, { "version_value" : "1.6.8_p2", "version_affected" : "=" }, { "version_value" : "1.6.8_p5", "version_affected" : "=" }, { "version_value" : "1.6.8_p7", "version_affected" : "=" }, { "version_value" : "1.6.8_p8", "version_affected" : "=" }, { "version_value" : "1.6.8_p9", "version_affected" : "=" }, { "version_value" : "1.6.8_p12", "version_affected" : "=" }, { "version_value" : "1.6.9_p17", "version_affected" : "=" }, { "version_value" : "1.6.9_p18", "version_affected" : "=" }, { "version_value" : "1.6.9_p19", "version_affected" : "=" }, { "version_value" : "1.7.0", "version_affected" : "=" }, { "version_value" : "1.7.1", "version_affected" : "=" }, { "version_value" : "1.7.2", "version_affected" : "=" }, { "version_value" : "1.7.2p1", "version_affected" : "=" }, { "version_value" : "1.7.2p2", "version_affected" : "=" }, { "version_value" : "1.7.2p3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz", "name" : "ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=570737", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040578.html", "name" : "FEDORA-2010-6701", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040588.html", "name" : "FEDORA-2010-6749", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38659", "name" : "38659", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38762", "name" : "38762", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38795", "name" : "38795", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38803", "name" : "38803", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39399", "name" : "39399", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023658", "name" : "1023658", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://slackware.com/security/viewer.php?l=slackware-security&y=2010&m=slackware-security.577019", "name" : "SSA:2010-110-01", "refsource" : "SLACKWARE", "tags" : [ ] }, { "url" : "http://sudo.ws/bugs/show_bug.cgi?id=389", "name" : "http://sudo.ws/bugs/show_bug.cgi?id=389", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://sudo.ws/repos/sudo/rev/88f3181692fe", "name" : "http://sudo.ws/repos/sudo/rev/88f3181692fe", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://sudo.ws/repos/sudo/rev/f86e1b56d074", "name" : "http://sudo.ws/repos/sudo/rev/f86e1b56d074", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://wiki.rpath.com/Advisories:rPSA-2010-0075", "name" : "http://wiki.rpath.com/Advisories:rPSA-2010-0075", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2006", "name" : "DSA-2006", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml", "name" : "GLSA-201003-01", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/", "name" : "http://www.linuxquestions.org/questions/linux-security-4/the-use-of-sudoedit-command-question-785442/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:049", "name" : "MDVSA-2010:049", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/514489/100/0/threaded", "name" : "20101027 rPSA-2010-0075-1 sudo", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38362", "name" : "38362", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.sudo.ws/sudo/stable.html", "name" : "http://www.sudo.ws/sudo/stable.html", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.ubuntu.com/usn/USN-905-1", "name" : "USN-905-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0450", "name" : "ADV-2010-0450", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0949", "name" : "ADV-2010-0949", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10814", "name" : "oval:org.mitre.oval:def:10814", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7238", "name" : "oval:org.mitre.oval:def:7238", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4, when a pseudo-command is enabled, permits a match between the name of the pseudo-command and the name of an executable file in an arbitrary directory, which allows local users to gain privileges via a crafted executable file, as demonstrated by a file named sudoedit in a user's home directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.2p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.2p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.7.2p3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-24T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0427", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "todd_miller", "product" : { "product_data" : [ { "product_name" : "sudo", "version" : { "version_data" : [ { "version_value" : "1.6", "version_affected" : "=" }, { "version_value" : "1.6.1", "version_affected" : "=" }, { "version_value" : "1.6.2", "version_affected" : "=" }, { "version_value" : "1.6.3", "version_affected" : "=" }, { "version_value" : "1.6.3_p1", "version_affected" : "=" }, { "version_value" : "1.6.3_p2", "version_affected" : "=" }, { "version_value" : "1.6.3_p3", "version_affected" : "=" }, { "version_value" : "1.6.3_p4", "version_affected" : "=" }, { "version_value" : "1.6.3_p5", "version_affected" : "=" }, { "version_value" : "1.6.3_p6", "version_affected" : "=" }, { "version_value" : "1.6.3_p7", "version_affected" : "=" }, { "version_value" : "1.6.4_p1", "version_affected" : "=" }, { "version_value" : "1.6.4_p2", "version_affected" : "=" }, { "version_value" : "1.6.5", "version_affected" : "=" }, { "version_value" : "1.6.5_p1", "version_affected" : "=" }, { "version_value" : "1.6.5_p2", "version_affected" : "=" }, { "version_value" : "1.6.6", "version_affected" : "=" }, { "version_value" : "1.6.7", "version_affected" : "=" }, { "version_value" : "1.6.7_p5", "version_affected" : "=" }, { "version_value" : "1.6.8", "version_affected" : "=" }, { "version_value" : "1.6.8_p1", "version_affected" : "=" }, { "version_value" : "1.6.8_p5", "version_affected" : "=" }, { "version_value" : "1.6.8_p8", "version_affected" : "=" }, { "version_value" : "1.6.8_p9", "version_affected" : "=" }, { "version_value" : "1.6.8_p12", "version_affected" : "=" }, { "version_value" : "1.6.9_p17", "version_affected" : "=" }, { "version_value" : "1.6.9_p18", "version_affected" : "=" }, { "version_value" : "1.6.9_p19", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz", "name" : "ftp://ftp.sudo.ws/pub/sudo/sudo-1.6.9p21.patch.gz", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-03/msg00004.html", "name" : "SUSE-SR:2010:006", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38762", "name" : "38762", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38795", "name" : "38795", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38803", "name" : "38803", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38915", "name" : "38915", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023658", "name" : "1023658", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://sudo.ws/repos/sudo/rev/aa0b6c01c462", "name" : "http://sudo.ws/repos/sudo/rev/aa0b6c01c462", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://wiki.rpath.com/Advisories:rPSA-2010-0075", "name" : "http://wiki.rpath.com/Advisories:rPSA-2010-0075", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2006", "name" : "DSA-2006", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.gentoo.org/security/en/glsa/glsa-201003-01.xml", "name" : "GLSA-201003-01", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://www.gratisoft.us/bugzilla/attachment.cgi?id=255", "name" : "http://www.gratisoft.us/bugzilla/attachment.cgi?id=255", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349", "name" : "http://www.gratisoft.us/bugzilla/show_bug.cgi?id=349", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/23/4", "name" : "[oss-security] 20100223 CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/24/5", "name" : "[oss-security] 20100224 Re: CVE assignment notification -- CVE-2010-0427 -- sudo fails to reset group permissions if runas_default set", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/514489/100/0/threaded", "name" : "20101027 rPSA-2010-0075-1 sudo", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8", "name" : "http://www.sudo.ws/cgi-bin/cvsweb/sudo/set_perms.c.diff?r1=1.30.2.7&r2=1.30.2.8", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.ubuntu.com/usn/USN-905-1", "name" : "USN-905-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=567622", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=567622", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10946", "name" : "oval:org.mitre.oval:def:10946", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7216", "name" : "oval:org.mitre.oval:def:7216", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "sudo 1.6.x before 1.6.9p21, when the runas_default option is used, does not properly set group memberships, which allows local users to gain privileges via a sudo command." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.3_p7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.4_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.5_p2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.7_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.8_p12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:todd_miller:sudo:1.6.9_p19:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 4.4 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-25T19:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0428", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "qspice", "version" : { "version_data" : [ { "version_value" : "0.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=568699", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=568699", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0622.html", "name" : "RHSA-2010:0622", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0633.html", "name" : "RHSA-2010:0633", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:qspice:0.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-08-24T18:00Z", "lastModifiedDate" : "2010-08-25T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0429", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "qspice", "version" : { "version_data" : [ { "version_value" : "0.3.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=568701", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=568701", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0622.html", "name" : "RHSA-2010:0622", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0633.html", "name" : "RHSA-2010:0633", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libspice, as used in QEMU-KVM in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and qspice 0.3.0, does not properly restrict the addresses upon which memory-management actions are performed, which allows guest OS users to cause a denial of service (guest OS crash) or possibly gain privileges via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:qspice:0.3.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-08-24T18:00Z", "lastModifiedDate" : "2010-08-25T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0430", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization_hypervisor", "version" : { "version_data" : [ { "version_value" : "5.4-2.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://rhn.redhat.com/errata/RHSA-2010-0271.html", "name" : "RHSA-2010:0271", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=568702", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=568702", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0476.html", "name" : "RHSA-2010:0476", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "libspice, as used in QEMU-KVM in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H or rhev-hypervisor) before 5.5-2.2 and possibly other products, allows guest OS users to read from or write to arbitrary QEMU memory by modifying the address that is used by Cairo for memory mappings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization_hypervisor:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.4-2.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:A/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "ADJACENT_NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.4 }, "severity" : "HIGH", "exploitabilityScore" : 4.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2013-12-27T01:55Z", "lastModifiedDate" : "2013-12-27T15:20Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0431", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "kvm", "version" : { "version_data" : [ { "version_value" : "83", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=568809", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=568809", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0622.html", "name" : "RHSA-2010:0622", "refsource" : "REDHAT", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0627.html", "name" : "RHSA-2010:0627", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "QEMU-KVM, as used in the Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2 and KVM 83, does not properly validate guest QXL driver pointers, which allows guest OS users to cause a denial of service (invalid pointer dereference and guest OS crash) or possibly gain privileges via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:kvm:83:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 2.7, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-08-24T18:00Z", "lastModifiedDate" : "2010-08-25T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0432", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "ofbiz", "version" : { "version_data" : [ { "version_value" : "09.04", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920369", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920369", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920370", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920370", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920371", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920371", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920372", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920372", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920379", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920379", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920380", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920380", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920381", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920381", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=920382", "name" : "http://svn.apache.org/viewvc?view=revision&revision=920382", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.bonsai-sec.com/en/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php", "name" : "http://www.bonsai-sec.com/en/research/vulnerabilities/apacheofbiz-multiple-xss-0103.php", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39489", "name" : "39489", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in the Apache Open For Business Project (aka OFBiz) 09.04 and earlier, as used in Opentaps, Neogia, and Entente Oya, allow remote attackers to inject arbitrary web script or HTML via (1) the productStoreId parameter to control/exportProductListing, (2) the partyId parameter to partymgr/control/viewprofile (aka partymgr/control/login), (3) the start parameter to myportal/control/showPortalPage, (4) an invalid URI beginning with /facility/control/ReceiveReturn (aka /crmsfa/control/ReceiveReturn or /cms/control/ReceiveReturn), (5) the contentId parameter (aka the entityName variable) to ecommerce/control/ViewBlogArticle, (6) the entityName parameter to webtools/control/FindGeneric, or the (7) subject or (8) content parameter to an unspecified component under ecommerce/control/contactus." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*", "versionEndIncluding" : "09.04" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-15T17:30Z", "lastModifiedDate" : "2018-07-30T12:31Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0433", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "openssl", "product" : { "product_data" : [ { "product_name" : "openssl", "version" : { "version_data" : [ { "version_value" : "0.9.8", "version_affected" : "=" }, { "version_value" : "0.9.8a", "version_affected" : "=" }, { "version_value" : "0.9.8b", "version_affected" : "=" }, { "version_value" : "0.9.8c", "version_affected" : "=" }, { "version_value" : "0.9.8d", "version_affected" : "=" }, { "version_value" : "0.9.8e", "version_affected" : "=" }, { "version_value" : "0.9.8f", "version_affected" : "=" }, { "version_value" : "0.9.8g", "version_affected" : "=" }, { "version_value" : "0.9.8h", "version_affected" : "=" }, { "version_value" : "0.9.8i", "version_affected" : "=" }, { "version_value" : "0.9.8j", "version_affected" : "=" }, { "version_value" : "0.9.8k", "version_affected" : "=" }, { "version_value" : "0.9.8l", "version_affected" : "=" }, { "version_value" : "0.9.8m", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc", "name" : "http://aix.software.ibm.com/aix/efixes/security/openssl_advisory.asc", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://cvs.openssl.org/chngview?cn=19374", "name" : "http://cvs.openssl.org/chngview?cn=19374", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7", "name" : "http://groups.google.com/group/mailing.openssl.users/browse_thread/thread/c3e1ab0034ca4b4c/66aa896c3a78b2f7", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/038587.html", "name" : "FEDORA-2010-5744", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039561.html", "name" : "FEDORA-2010-5357", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127128920008563&w=2", "name" : "HPSBUX02517", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2", "name" : "HPSBUX02531", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39461", "name" : "39461", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39932", "name" : "39932", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42724", "name" : "42724", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42733", "name" : "42733", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43311", "name" : "43311", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.mail-archive.com/dovecot@dovecot.org/msg26224.html", "name" : "[dovecot] 20100219 segfault - (imap|pop3)-login during nessus scan", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:076", "name" : "MDVSA-2010:076", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openssl.org/news/changelog.html", "name" : "http://www.openssl.org/news/changelog.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/03/03/5", "name" : "[oss-security] 20100303 OpenSSL (with KRB5) remote crash - CVE-2010-0433", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "name" : "http://www.vmware.com/support/vsphere4/doc/vsp_vc41_u1_rel_notes.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0839", "name" : "ADV-2010-0839", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0916", "name" : "ADV-2010-0916", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0933", "name" : "ADV-2010-0933", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1216", "name" : "ADV-2010-1216", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=567711", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=567711", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=569774", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=569774", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://kb.bluecoat.com/index?page=content&id=SA50", "name" : "https://kb.bluecoat.com/index?page=content&id=SA50", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000101.html", "name" : "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.0.6a has been released", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.balabit.com/pipermail/syslog-ng-announce/2011-January/000102.html", "name" : "[syslog-ng-announce] 20110110 syslog-ng Premium Edition 3.2.1a has been released", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12260", "name" : "oval:org.mitre.oval:def:12260", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6718", "name" : "oval:org.mitre.oval:def:6718", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9856", "name" : "oval:org.mitre.oval:def:9856", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kssl_keytab_is_available function in ssl/kssl.c in OpenSSL before 0.9.8n, when Kerberos is enabled but Kerberos configuration files cannot be opened, does not check a certain return value, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via SSL cipher negotiation, as demonstrated by a chroot installation of Dovecot or stunnel without Kerberos configuration files inside the chroot." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8i:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8j:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8k:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:0.9.8l:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:openssl:openssl:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.9.8m" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T19:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0434", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apache", "product" : { "product_data" : [ { "product_name" : "http_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.2.9", "version_affected" : "=" }, { "version_value" : "2.2.11", "version_affected" : "=" }, { "version_value" : "2.2.12", "version_affected" : "=" }, { "version_value" : "2.2.13", "version_affected" : "=" }, { "version_value" : "2.2.14", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://httpd.apache.org/security/vulnerabilities_22.html", "name" : "http://httpd.apache.org/security/vulnerabilities_22.html", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00000.html", "name" : "APPLE-SA-2010-11-10-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039957.html", "name" : "FEDORA-2010-5942", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-May/040652.html", "name" : "FEDORA-2010-6131", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00006.html", "name" : "SUSE-SR:2010:010", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://lists.vmware.com/pipermail/security-announce/2010/000105.html", "name" : "[security-announce] 20100923 VMSA-2010-0014 VMware Workstation, Player, and ACE address several security issues", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://marc.info/?l=bugtraq&m=127557640302499&w=2", "name" : "SSRT100108", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39100", "name" : "39100", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39115", "name" : "39115", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39501", "name" : "39501", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39628", "name" : "39628", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39632", "name" : "39632", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39656", "name" : "39656", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40096", "name" : "40096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4435", "name" : "http://support.apple.com/kb/HT4435", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h", "name" : "http://svn.apache.org/viewvc/httpd/httpd/branches/2.2.x/server/protocol.c?r1=917617&r2=917867&pathrev=917867&diff_format=h", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=917867", "name" : "http://svn.apache.org/viewvc?view=revision&revision=917867", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://svn.apache.org/viewvc?view=revision&revision=918427", "name" : "http://svn.apache.org/viewvc?view=revision&revision=918427", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2035", "name" : "DSA-2035", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpujuly2013-1899826.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0168.html", "name" : "RHSA-2010:0168", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0175.html", "name" : "RHSA-2010:0175", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38494", "name" : "38494", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2010-0014.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0911", "name" : "ADV-2010-0911", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0994", "name" : "ADV-2010-0994", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1001", "name" : "ADV-2010-1001", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1057", "name" : "ADV-2010-1057", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1411", "name" : "ADV-2010-1411", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM08939", "name" : "PM08939", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM12247", "name" : "PM12247", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1PM15829", "name" : "PM15829", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=570171", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=570171", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56625", "name" : "apache-http-rh-info-disclosure(56625)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=48359", "name" : "https://issues.apache.org/bugzilla/show_bug.cgi?id=48359", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/54a42d4b01968df1117cea77fc53d6beb931c0e05936ad02af93e9ac@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048742 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/5df9bfb86a3b054bb985a45ff9250b0332c9ecc181eec232489e7f79@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048743 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/8d63cb8e9100f28a99429b4328e4e7cebce861d5772ac9863ba2ae6f@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048743 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/f7f95ac1cd9895db2714fa3ebaa0b94d0c6df360f742a40951384a53@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20190815 svn commit: r1048742 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r0276683d8e1e07153fc8642618830ac0ade85b9ae0dc7b07f63bb8fc@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058586 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r57608dc51b79102f3952ae06f54d5277b649c86d6533dcd6a7d201f7@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058586 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/r8828e649175df56f1f9e3919938ac7826128525426e2748f0ab62feb@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058587 [2/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://lists.apache.org/thread.html/rfbaf647d52c1cb843e726a0933f156366a806cead84fbd430951591b@%3Ccvs.httpd.apache.org%3E", "name" : "[httpd-cvs] 20200401 svn commit: r1058587 [3/4] - in /websites/staging/httpd/trunk/content: ./ security/vulnerabilities-httpd.xml security/vulnerabilities_13.html security/vulnerabilities_20.html security/vulnerabilities_22.html security/vulnerabilities_24.html", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10358", "name" : "oval:org.mitre.oval:def:10358", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8695", "name" : "oval:org.mitre.oval:def:8695", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ap_read_request function in server/protocol.c in the Apache HTTP Server 2.2.x before 2.2.15, when a multithreaded MPM is used, does not properly handle headers in subrequests in certain circumstances involving a parent request that has a body, which might allow remote attackers to obtain sensitive information via a crafted request that triggers access to memory locations associated with an earlier request." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apache:http_server:2.2.14:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-05T19:30Z", "lastModifiedDate" : "2018-10-30T16:25Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0435", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "redhat", "product" : { "product_data" : [ { "product_name" : "enterprise_virtualization", "version" : { "version_data" : [ { "version_value" : "2.2", "version_affected" : "=" } ] } }, { "product_name" : "kvm", "version" : { "version_data" : [ { "version_value" : "83", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00000.html", "name" : "SUSE-SA:2011:001", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42778", "name" : "42778", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0012", "name" : "ADV-2011-0012", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=570528", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=570528", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0622.html", "name" : "RHSA-2010:0622", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://rhn.redhat.com/errata/RHSA-2010-0627.html", "name" : "RHSA-2010:0627", "refsource" : "REDHAT", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Hypervisor (aka rhev-hypervisor) in Red Hat Enterprise Virtualization (RHEV) 2.2, and KVM 83, when the Intel VT-x extension is enabled, allows guest OS users to cause a denial of service (NULL pointer dereference and host OS crash) via vectors related to instruction emulation." }, { "lang" : "en", "value" : "Per: http://cwe.mitre.org/data/definitions/476.html\r\n\r\n'NULL Pointer Dereference'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:enterprise_virtualization:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:redhat:kvm:83:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.6 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-08-24T18:00Z", "lastModifiedDate" : "2011-01-19T06:54Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0436", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kde", "product" : { "product_data" : [ { "product_name" : "kde_sc", "version" : { "version_data" : [ { "version_value" : "2.2.0", "version_affected" : "=" }, { "version_value" : "3.5.10", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3.0", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.4.0", "version_affected" : "=" }, { "version_value" : "4.4.1", "version_affected" : "=" }, { "version_value" : "4.4.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://ftp.kde.org/pub/kde/security_patches/kdebase-workspace-4.3.5-CVE-2010-0436.diff", "name" : "ftp://ftp.kde.org/pub/kde/security_patches/kdebase-workspace-4.3.5-CVE-2010-0436.diff", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-April/039533.html", "name" : "FEDORA-2010-6605", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-04/msg00002.html", "name" : "SUSE-SR:2010:009", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://rhn.redhat.com/errata/RHSA-2010-0348.html", "name" : "RHSA-2010:0348", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39419", "name" : "39419", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39481", "name" : "39481", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39506", "name" : "39506", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2037", "name" : "DSA-2037", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.kde.org/info/security/advisory-20100413-1.txt", "name" : "http://www.kde.org/info/security/advisory-20100413-1.txt", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39467", "name" : "39467", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0879", "name" : "ADV-2010-0879", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=570613", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=570613", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57823", "name" : "kde-kdm-privilege-escalation(57823)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9999", "name" : "oval:org.mitre.oval:def:9999", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in backend/ctrl.c in KDM in KDE Software Compilation (SC) 2.2.0 through 4.4.2 allows local users to change the permissions of arbitrary files, and consequently gain privileges, by blocking the removal of a certain directory that contains a control socket, related to improper interaction with ksm." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:2.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:3.5.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kde:kde_sc:4.4.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-15T17:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0437", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "linux", "product" : { "product_data" : [ { "product_name" : "linux_kernel", "version" : { "version_data" : [ { "version_value" : "2.6.0", "version_affected" : "=" }, { "version_value" : "2.6.1", "version_affected" : "=" }, { "version_value" : "2.6.2", "version_affected" : "=" }, { "version_value" : "2.6.3", "version_affected" : "=" }, { "version_value" : "2.6.4", "version_affected" : "=" }, { "version_value" : "2.6.5", "version_affected" : "=" }, { "version_value" : "2.6.6", "version_affected" : "=" }, { "version_value" : "2.6.7", "version_affected" : "=" }, { "version_value" : "2.6.8", "version_affected" : "=" }, { "version_value" : "2.6.8.1", "version_affected" : "=" }, { "version_value" : "2.6.9", "version_affected" : "=" }, { "version_value" : "2.6.10", "version_affected" : "=" }, { "version_value" : "2.6.11", "version_affected" : "=" }, { "version_value" : "2.6.11.1", "version_affected" : "=" }, { "version_value" : "2.6.11.2", "version_affected" : "=" }, { "version_value" : "2.6.11.3", "version_affected" : "=" }, { "version_value" : "2.6.11.4", "version_affected" : "=" }, { "version_value" : "2.6.11.5", "version_affected" : "=" }, { "version_value" : "2.6.11.6", "version_affected" : "=" }, { "version_value" : "2.6.11.7", "version_affected" : "=" }, { "version_value" : "2.6.11.8", "version_affected" : "=" }, { "version_value" : "2.6.11.9", "version_affected" : "=" }, { "version_value" : "2.6.11.10", "version_affected" : "=" }, { "version_value" : "2.6.11.11", "version_affected" : "=" }, { "version_value" : "2.6.11.12", "version_affected" : "=" }, { "version_value" : "2.6.12", "version_affected" : "=" }, { "version_value" : "2.6.12.1", "version_affected" : "=" }, { "version_value" : "2.6.12.2", "version_affected" : "=" }, { "version_value" : "2.6.12.3", "version_affected" : "=" }, { "version_value" : "2.6.12.4", "version_affected" : "=" }, { "version_value" : "2.6.12.5", "version_affected" : "=" }, { "version_value" : "2.6.12.6", "version_affected" : "=" }, { "version_value" : "2.6.13", "version_affected" : "=" }, { "version_value" : "2.6.13.1", "version_affected" : "=" }, { "version_value" : "2.6.13.2", "version_affected" : "=" }, { "version_value" : "2.6.13.3", "version_affected" : "=" }, { "version_value" : "2.6.13.4", "version_affected" : "=" }, { "version_value" : "2.6.13.5", "version_affected" : "=" }, { "version_value" : "2.6.14", "version_affected" : "=" }, { "version_value" : "2.6.14.1", "version_affected" : "=" }, { "version_value" : "2.6.14.2", "version_affected" : "=" }, { "version_value" : "2.6.14.3", "version_affected" : "=" }, { "version_value" : "2.6.14.4", "version_affected" : "=" }, { "version_value" : "2.6.14.5", "version_affected" : "=" }, { "version_value" : "2.6.14.6", "version_affected" : "=" }, { "version_value" : "2.6.14.7", "version_affected" : "=" }, { "version_value" : "2.6.15", "version_affected" : "=" }, { "version_value" : "2.6.15.1", "version_affected" : "=" }, { "version_value" : "2.6.15.2", "version_affected" : "=" }, { "version_value" : "2.6.15.3", "version_affected" : "=" }, { "version_value" : "2.6.15.4", "version_affected" : "=" }, { "version_value" : "2.6.15.5", "version_affected" : "=" }, { "version_value" : "2.6.15.6", "version_affected" : "=" }, { "version_value" : "2.6.15.7", "version_affected" : "=" }, { "version_value" : "2.6.16", "version_affected" : "=" }, { "version_value" : "2.6.16.1", "version_affected" : "=" }, { "version_value" : "2.6.16.2", "version_affected" : "=" }, { "version_value" : "2.6.16.3", "version_affected" : "=" }, { "version_value" : "2.6.16.4", "version_affected" : "=" }, { "version_value" : "2.6.16.5", "version_affected" : "=" }, { "version_value" : "2.6.16.6", "version_affected" : "=" }, { "version_value" : "2.6.16.7", "version_affected" : "=" }, { "version_value" : "2.6.16.8", "version_affected" : "=" }, { "version_value" : "2.6.16.9", "version_affected" : "=" }, { "version_value" : "2.6.16.10", "version_affected" : "=" }, { "version_value" : "2.6.16.11", "version_affected" : "=" }, { "version_value" : "2.6.16.12", "version_affected" : "=" }, { "version_value" : "2.6.16.13", "version_affected" : "=" }, { "version_value" : "2.6.16.14", "version_affected" : "=" }, { "version_value" : "2.6.16.15", "version_affected" : "=" }, { "version_value" : "2.6.16.16", "version_affected" : "=" }, { "version_value" : "2.6.16.17", "version_affected" : "=" }, { "version_value" : "2.6.16.18", "version_affected" : "=" }, { "version_value" : "2.6.16.19", "version_affected" : "=" }, { "version_value" : "2.6.16.20", "version_affected" : "=" }, { "version_value" : "2.6.16.21", "version_affected" : "=" }, { "version_value" : "2.6.16.22", "version_affected" : "=" }, { "version_value" : "2.6.16.23", "version_affected" : "=" }, { "version_value" : "2.6.16.24", "version_affected" : "=" }, { "version_value" : "2.6.16.25", "version_affected" : "=" }, { "version_value" : "2.6.16.26", "version_affected" : "=" }, { "version_value" : "2.6.16.27", "version_affected" : "=" }, { "version_value" : "2.6.16.28", "version_affected" : "=" }, { "version_value" : "2.6.16.29", "version_affected" : "=" }, { "version_value" : "2.6.16.30", "version_affected" : "=" }, { "version_value" : "2.6.16.31", "version_affected" : "=" }, { "version_value" : "2.6.16.32", "version_affected" : "=" }, { "version_value" : "2.6.16.33", "version_affected" : "=" }, { "version_value" : "2.6.16.34", "version_affected" : "=" }, { "version_value" : "2.6.16.35", "version_affected" : "=" }, { "version_value" : "2.6.16.36", "version_affected" : "=" }, { "version_value" : "2.6.16.37", "version_affected" : "=" }, { "version_value" : "2.6.16.38", "version_affected" : "=" }, { "version_value" : "2.6.16.39", "version_affected" : "=" }, { "version_value" : "2.6.16.40", "version_affected" : "=" }, { "version_value" : "2.6.16.41", "version_affected" : "=" }, { "version_value" : "2.6.16.42", "version_affected" : "=" }, { "version_value" : "2.6.16.43", "version_affected" : "=" }, { "version_value" : "2.6.16.44", "version_affected" : "=" }, { "version_value" : "2.6.16.45", "version_affected" : "=" }, { "version_value" : "2.6.16.46", "version_affected" : "=" }, { "version_value" : "2.6.16.47", "version_affected" : "=" }, { "version_value" : "2.6.16.48", "version_affected" : "=" }, { "version_value" : "2.6.16.49", "version_affected" : "=" }, { "version_value" : "2.6.16.50", "version_affected" : "=" }, { "version_value" : "2.6.16.51", "version_affected" : "=" }, { "version_value" : "2.6.16.52", "version_affected" : "=" }, { "version_value" : "2.6.16.53", "version_affected" : "=" }, { "version_value" : "2.6.16.54", "version_affected" : "=" }, { "version_value" : "2.6.16.55", "version_affected" : "=" }, { "version_value" : "2.6.16.56", "version_affected" : "=" }, { "version_value" : "2.6.16.57", "version_affected" : "=" }, { "version_value" : "2.6.16.58", "version_affected" : "=" }, { "version_value" : "2.6.16.59", "version_affected" : "=" }, { "version_value" : "2.6.16.60", "version_affected" : "=" }, { "version_value" : "2.6.16.61", "version_affected" : "=" }, { "version_value" : "2.6.16.62", "version_affected" : "=" }, { "version_value" : "2.6.17", "version_affected" : "=" }, { "version_value" : "2.6.17.1", "version_affected" : "=" }, { "version_value" : "2.6.17.2", "version_affected" : "=" }, { "version_value" : "2.6.17.3", "version_affected" : "=" }, { "version_value" : "2.6.17.4", "version_affected" : "=" }, { "version_value" : "2.6.17.5", "version_affected" : "=" }, { "version_value" : "2.6.17.6", "version_affected" : "=" }, { "version_value" : "2.6.17.7", "version_affected" : "=" }, { "version_value" : "2.6.17.8", "version_affected" : "=" }, { "version_value" : "2.6.17.9", "version_affected" : "=" }, { "version_value" : "2.6.17.10", "version_affected" : "=" }, { "version_value" : "2.6.17.11", "version_affected" : "=" }, { "version_value" : "2.6.17.12", "version_affected" : "=" }, { "version_value" : "2.6.17.13", "version_affected" : "=" }, { "version_value" : "2.6.17.14", "version_affected" : "=" }, { "version_value" : "2.6.18", "version_affected" : "=" }, { "version_value" : "2.6.18.1", "version_affected" : "=" }, { "version_value" : "2.6.18.2", "version_affected" : "=" }, { "version_value" : "2.6.18.3", "version_affected" : "=" }, { "version_value" : "2.6.18.4", "version_affected" : "=" }, { "version_value" : "2.6.18.5", "version_affected" : "=" }, { "version_value" : "2.6.18.6", "version_affected" : "=" }, { "version_value" : "2.6.18.7", "version_affected" : "=" }, { "version_value" : "2.6.18.8", "version_affected" : "=" }, { "version_value" : "2.6.19", "version_affected" : "=" }, { "version_value" : "2.6.19.1", "version_affected" : "=" }, { "version_value" : "2.6.19.2", "version_affected" : "=" }, { "version_value" : "2.6.19.3", "version_affected" : "=" }, { "version_value" : "2.6.19.4", "version_affected" : "=" }, { "version_value" : "2.6.19.5", "version_affected" : "=" }, { "version_value" : "2.6.19.6", "version_affected" : "=" }, { "version_value" : "2.6.19.7", "version_affected" : "=" }, { "version_value" : "2.6.20", "version_affected" : "=" }, { "version_value" : "2.6.20.1", "version_affected" : "=" }, { "version_value" : "2.6.20.2", "version_affected" : "=" }, { "version_value" : "2.6.20.3", "version_affected" : "=" }, { "version_value" : "2.6.20.4", "version_affected" : "=" }, { "version_value" : "2.6.20.5", "version_affected" : "=" }, { "version_value" : "2.6.20.6", "version_affected" : "=" }, { "version_value" : "2.6.20.7", "version_affected" : "=" }, { "version_value" : "2.6.20.8", "version_affected" : "=" }, { "version_value" : "2.6.20.9", "version_affected" : "=" }, { "version_value" : "2.6.20.10", "version_affected" : "=" }, { "version_value" : "2.6.20.11", "version_affected" : "=" }, { "version_value" : "2.6.20.12", "version_affected" : "=" }, { "version_value" : "2.6.20.13", "version_affected" : "=" }, { "version_value" : "2.6.20.14", "version_affected" : "=" }, { "version_value" : "2.6.20.15", "version_affected" : "=" }, { "version_value" : "2.6.20.16", "version_affected" : "=" }, { "version_value" : "2.6.20.17", "version_affected" : "=" }, { "version_value" : "2.6.20.18", "version_affected" : "=" }, { "version_value" : "2.6.20.19", "version_affected" : "=" }, { "version_value" : "2.6.20.20", "version_affected" : "=" }, { "version_value" : "2.6.20.21", "version_affected" : "=" }, { "version_value" : "2.6.21", "version_affected" : "=" }, { "version_value" : "2.6.21.1", "version_affected" : "=" }, { "version_value" : "2.6.21.2", "version_affected" : "=" }, { "version_value" : "2.6.21.3", "version_affected" : "=" }, { "version_value" : "2.6.21.4", "version_affected" : "=" }, { "version_value" : "2.6.21.5", "version_affected" : "=" }, { "version_value" : "2.6.21.6", "version_affected" : "=" }, { "version_value" : "2.6.21.7", "version_affected" : "=" }, { "version_value" : "2.6.22", "version_affected" : "=" }, { "version_value" : "2.6.22.1", "version_affected" : "=" }, { "version_value" : "2.6.22.2", "version_affected" : "=" }, { "version_value" : "2.6.22.3", "version_affected" : "=" }, { "version_value" : "2.6.22.4", "version_affected" : "=" }, { "version_value" : "2.6.22.5", "version_affected" : "=" }, { "version_value" : "2.6.22.6", "version_affected" : "=" }, { "version_value" : "2.6.22.7", "version_affected" : "=" }, { "version_value" : "2.6.22.8", "version_affected" : "=" }, { "version_value" : "2.6.22.9", "version_affected" : "=" }, { "version_value" : "2.6.22.10", "version_affected" : "=" }, { "version_value" : "2.6.22.11", "version_affected" : "=" }, { "version_value" : "2.6.22.12", "version_affected" : "=" }, { "version_value" : "2.6.22.13", "version_affected" : "=" }, { "version_value" : "2.6.22.14", "version_affected" : "=" }, { "version_value" : "2.6.22.15", "version_affected" : "=" }, { "version_value" : "2.6.22.16", "version_affected" : "=" }, { "version_value" : "2.6.22.17", "version_affected" : "=" }, { "version_value" : "2.6.22.18", "version_affected" : "=" }, { "version_value" : "2.6.22.19", "version_affected" : "=" }, { "version_value" : "2.6.22.20", "version_affected" : "=" }, { "version_value" : "2.6.22.21", "version_affected" : "=" }, { "version_value" : "2.6.22.22", "version_affected" : "=" }, { "version_value" : "2.6.23", "version_affected" : "=" }, { "version_value" : "2.6.23.1", "version_affected" : "=" }, { "version_value" : "2.6.23.2", "version_affected" : "=" }, { "version_value" : "2.6.23.3", "version_affected" : "=" }, { "version_value" : "2.6.23.4", "version_affected" : "=" }, { "version_value" : "2.6.23.5", "version_affected" : "=" }, { "version_value" : "2.6.23.6", "version_affected" : "=" }, { "version_value" : "2.6.23.7", "version_affected" : "=" }, { "version_value" : "2.6.23.8", "version_affected" : "=" }, { "version_value" : "2.6.23.9", "version_affected" : "=" }, { "version_value" : "2.6.23.10", "version_affected" : "=" }, { "version_value" : "2.6.23.11", "version_affected" : "=" }, { "version_value" : "2.6.23.12", "version_affected" : "=" }, { "version_value" : "2.6.23.13", "version_affected" : "=" }, { "version_value" : "2.6.23.14", "version_affected" : "=" }, { "version_value" : "2.6.23.15", "version_affected" : "=" }, { "version_value" : "2.6.23.16", "version_affected" : "=" }, { "version_value" : "2.6.23.17", "version_affected" : "=" }, { "version_value" : "2.6.24", "version_affected" : "=" }, { "version_value" : "2.6.24.1", "version_affected" : "=" }, { "version_value" : "2.6.24.2", "version_affected" : "=" }, { "version_value" : "2.6.24.3", "version_affected" : "=" }, { "version_value" : "2.6.24.4", "version_affected" : "=" }, { "version_value" : "2.6.24.5", "version_affected" : "=" }, { "version_value" : "2.6.24.6", "version_affected" : "=" }, { "version_value" : "2.6.24.7", "version_affected" : "=" }, { "version_value" : "2.6.25", "version_affected" : "=" }, { "version_value" : "2.6.25.1", "version_affected" : "=" }, { "version_value" : "2.6.25.2", "version_affected" : "=" }, { "version_value" : "2.6.25.3", "version_affected" : "=" }, { "version_value" : "2.6.25.4", "version_affected" : "=" }, { "version_value" : "2.6.25.5", "version_affected" : "=" }, { "version_value" : "2.6.25.6", "version_affected" : "=" }, { "version_value" : "2.6.25.7", "version_affected" : "=" }, { "version_value" : "2.6.25.8", "version_affected" : "=" }, { "version_value" : "2.6.25.9", "version_affected" : "=" }, { "version_value" : "2.6.25.10", "version_affected" : "=" }, { "version_value" : "2.6.25.11", "version_affected" : "=" }, { "version_value" : "2.6.25.12", "version_affected" : "=" }, { "version_value" : "2.6.25.13", "version_affected" : "=" }, { "version_value" : "2.6.25.14", "version_affected" : "=" }, { "version_value" : "2.6.25.15", "version_affected" : "=" }, { "version_value" : "2.6.25.16", "version_affected" : "=" }, { "version_value" : "2.6.25.17", "version_affected" : "=" }, { "version_value" : "2.6.25.18", "version_affected" : "=" }, { "version_value" : "2.6.25.19", "version_affected" : "=" }, { "version_value" : "2.6.25.20", "version_affected" : "=" }, { "version_value" : "2.6.26", "version_affected" : "=" }, { "version_value" : "2.6.26.1", "version_affected" : "=" }, { "version_value" : "2.6.26.2", "version_affected" : "=" }, { "version_value" : "2.6.26.3", "version_affected" : "=" }, { "version_value" : "2.6.26.4", "version_affected" : "=" }, { "version_value" : "2.6.26.5", "version_affected" : "=" }, { "version_value" : "2.6.26.6", "version_affected" : "=" }, { "version_value" : "2.6.26.7", "version_affected" : "=" }, { "version_value" : "2.6.26.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugzilla.kernel.org/show_bug.cgi?id=11469", "name" : "http://bugzilla.kernel.org/show_bug.cgi?id=11469", "refsource" : "CONFIRM", "tags" : [ "Exploit" ] }, { "url" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b", "name" : "http://git.kernel.org/?p=linux/kernel/git/torvalds/linux-2.6.git;a=commit;h=e550dfb0c2c31b6363aa463a035fc9f8dcaa3c9b", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39033", "name" : "39033", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43315", "name" : "43315", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27", "name" : "http://www.kernel.org/pub/linux/kernel/v2.6/ChangeLog-2.6.27", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/02/11/1", "name" : "[oss-security] 20100211 CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/03/04/4", "name" : "[oss-security] 20100304 Re: CVE request - kernel: ip6_dst_lookup_tail() NULL pointer dereference", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0147.html", "name" : "RHSA-2010:0147", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0161.html", "name" : "RHSA-2010:0161", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/516397/100/0/threaded", "name" : "20110211 VMSA-2011-0003 Third party component updates for VMware vCenter Server, vCenter Update Manager, ESXi and ESX", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "name" : "http://www.vmware.com/security/advisories/VMSA-2011-0003.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=563781", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=563781", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10061", "name" : "oval:org.mitre.oval:def:10061", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ip6_dst_lookup_tail function in net/ipv6/ip6_output.c in the Linux kernel before 2.6.27 does not properly handle certain circumstances involving an IPv6 TUN network interface and a large number of neighbors, which allows attackers to cause a denial of service (NULL pointer dereference and OOPS) or possibly have unspecified other impact via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.9:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.11.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.12.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.13.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.14.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.15.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.27:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.28:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.29:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.30:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.31:-rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.33:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.34:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.35:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.36:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.37:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.38:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.39:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.40:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.41:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.42:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.43:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.44:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.45:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.46:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.47:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.48:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.49:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.50:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.53:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.54:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.55:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.56:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.57:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.58:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.59:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.60:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.61:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.16.62:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.17.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18:rc7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.18.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.19.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.20.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.21.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.22.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.23.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.24.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.25.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:2.6.26.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionEndIncluding" : "2.6.26.8" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-24T13:34Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0438", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "otrs", "product" : { "product_data" : [ { "product_name" : "otrs", "version" : { "version_data" : [ { "version_value" : "2.1.1", "version_affected" : "=" }, { "version_value" : "2.1.2", "version_affected" : "=" }, { "version_value" : "2.1.3", "version_affected" : "=" }, { "version_value" : "2.1.4", "version_affected" : "=" }, { "version_value" : "2.1.5", "version_affected" : "=" }, { "version_value" : "2.1.6", "version_affected" : "=" }, { "version_value" : "2.1.7", "version_affected" : "=" }, { "version_value" : "2.1.8", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.3.1", "version_affected" : "=" }, { "version_value" : "2.3.2", "version_affected" : "=" }, { "version_value" : "2.3.3", "version_affected" : "=" }, { "version_value" : "2.3.4", "version_affected" : "=" }, { "version_value" : "2.4.1", "version_affected" : "=" }, { "version_value" : "2.4.2", "version_affected" : "=" }, { "version_value" : "2.4.3", "version_affected" : "=" }, { "version_value" : "2.4.4", "version_affected" : "=" }, { "version_value" : "2.4.5", "version_affected" : "=" }, { "version_value" : "2.4.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html", "name" : "SUSE-SR:2010:014", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://otrs.org/advisory/OSA-2010-01-en/", "name" : "http://otrs.org/advisory/OSA-2010-01-en/", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://otrs.org/releases/2.4.7/", "name" : "http://otrs.org/releases/2.4.7/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38507", "name" : "38507", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38544", "name" : "38544", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://source.otrs.org/viewvc.cgi/otrs/Kernel/System/Ticket.pm?view=log", "name" : "http://source.otrs.org/viewvc.cgi/otrs/Kernel/System/Ticket.pm?view=log", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.osvdb.org/62181", "name" : "62181", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.otrs.org/news/2010/otrs_2-4-7/", "name" : "http://www.otrs.org/news/2010/otrs_2-4-7/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38146", "name" : "38146", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in Kernel/System/Ticket.pm in OTRS-Core in Open Ticket Request System (OTRS) 2.1.x before 2.1.9, 2.2.x before 2.2.9, 2.3.x before 2.3.5, and 2.4.x before 2.4.7 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:otrs:otrs:2.4.6:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-09T19:30Z", "lastModifiedDate" : "2010-09-09T05:39Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0439", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chip_salzenberg", "product" : { "product_data" : [ { "product_name" : "deliver", "version" : { "version_data" : [ { "version_value" : "2.1.14", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-59" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.securityfocus.com/archive/1/510306/100/0/threaded", "name" : "20100324 Multiple vulnerabilities in Deliver", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38924", "name" : "38924", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Chip Salzenberg Deliver allows local users to cause a denial of service, obtain sensitive information, and possibly change the ownership of arbitrary files via a symlink attack on an unspecified file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chip_salzenberg:deliver:2.1.14:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-26T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0440", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "cisco", "product" : { "product_data" : [ { "product_name" : "adaptive_security_appliance_software", "version" : { "version_data" : [ { "version_value" : "8.0", "version_affected" : "=" }, { "version_value" : "8.0(2)", "version_affected" : "=" }, { "version_value" : "8.0(3)", "version_affected" : "=" }, { "version_value" : "8.0(4)", "version_affected" : "=" }, { "version_value" : "8.1", "version_affected" : "=" }, { "version_value" : "8.2", "version_affected" : "=" } ] } }, { "product_name" : "secure_desktop", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "3.0_base", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.0.31", "version_affected" : "=" }, { "version_value" : "3.1.1", "version_affected" : "=" }, { "version_value" : "3.1.1.27", "version_affected" : "=" }, { "version_value" : "3.1.1.33", "version_affected" : "=" }, { "version_value" : "3.1.1.45", "version_affected" : "=" }, { "version_value" : "3.1_base", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.0.136", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.1.103", "version_affected" : "=" }, { "version_value" : "3.2.1.126", "version_affected" : "=" }, { "version_value" : "3.2_base", "version_affected" : "=" }, { "version_value" : "3.3", "version_affected" : "=" }, { "version_value" : "3.3.0.118", "version_affected" : "=" }, { "version_value" : "3.3.0.151", "version_affected" : "=" }, { "version_value" : "3.3_base", "version_affected" : "=" }, { "version_value" : "3.4", "version_affected" : "=" }, { "version_value" : "3.4.1", "version_affected" : "=" }, { "version_value" : "3.4.2", "version_affected" : "=" }, { "version_value" : "3.4.0373", "version_affected" : "=" }, { "version_value" : "3.4.1108", "version_affected" : "=" }, { "version_value" : "3.4.2048", "version_affected" : "=" }, { "version_value" : "3.4_base", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38397", "name" : "38397", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=19843", "name" : "http://tools.cisco.com/security/center/viewAlert.x?alertId=19843", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.coresecurity.com/content/cisco-secure-desktop-xss", "name" : "http://www.coresecurity.com/content/cisco-secure-desktop-xss", "refsource" : "MISC", "tags" : [ "Exploit", "Third Party Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509290/100/0/threaded", "name" : "20100201 [CORE-2010-0106] Cisco Secure Desktop XSS/JavaScript Injection", "refsource" : "BUGTRAQ", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/37960", "name" : "37960", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0273", "name" : "ADV-2010-0273", "refsource" : "VUPEN", "tags" : [ "Third Party Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in +CSCOT+/translation in Cisco Secure Desktop 3.4.2048, and other versions before 3.5; as used in Cisco ASA appliance before 8.2(1), 8.1(2.7), and 8.0(5); allows remote attackers to inject arbitrary web script or HTML via a crafted POST parameter, which is not properly handled by an eval statement in binary/mainv.js that writes to start.html." }, { "lang" : "en", "value" : "Per: http://tools.cisco.com/security/center/viewAlert.x?alertId=19843\r\n\r\n\"Cisco Secure Desktop versions prior to 3.5 are vulnerable. Cisco Secure Desktop is a component of Cisco ASA 5500 Series Adaptive Security Appliances. Cisco ASA appliances are vulnerable only if the Cisco Secure Desktop feature has been enabled. Cisco ASA appliance versions prior to 8.2(1), 8.1(2.7), and 8.0(5) are vulnerable.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:secure_desktop:*:*:*:*:*:*:*:*", "versionEndExcluding" : "3.5" } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.0", "versionEndExcluding" : "8.0\\(5\\)" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.1", "versionEndExcluding" : "8.1\\(2.7\\)" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:cisco:adaptive_security_appliance_software:*:*:*:*:*:*:*:*", "versionStartIncluding" : "8.2", "versionEndExcluding" : "8.2\\(1\\)" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:h:cisco:asa_5500:-:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-03T18:30Z", "lastModifiedDate" : "2018-11-15T18:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0441", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "asterisk", "product" : { "product_data" : [ { "product_name" : "asterisk", "version" : { "version_data" : [ { "version_value" : "1.6.0", "version_affected" : "=" }, { "version_value" : "1.6.0.1", "version_affected" : "=" }, { "version_value" : "1.6.0.2", "version_affected" : "=" }, { "version_value" : "1.6.0.3", "version_affected" : "=" }, { "version_value" : "1.6.0.5", "version_affected" : "=" }, { "version_value" : "1.6.0.6", "version_affected" : "=" }, { "version_value" : "1.6.0.7", "version_affected" : "=" }, { "version_value" : "1.6.0.8", "version_affected" : "=" }, { "version_value" : "1.6.0.9", "version_affected" : "=" }, { "version_value" : "1.6.0.10", "version_affected" : "=" }, { "version_value" : "1.6.0.12", "version_affected" : "=" }, { "version_value" : "1.6.0.13", "version_affected" : "=" }, { "version_value" : "1.6.0.14", "version_affected" : "=" }, { "version_value" : "1.6.0.15", "version_affected" : "=" }, { "version_value" : "1.6.0.16-rc1", "version_affected" : "=" }, { "version_value" : "1.6.0.16-rc2", "version_affected" : "=" }, { "version_value" : "1.6.0.17", "version_affected" : "=" }, { "version_value" : "1.6.0.18", "version_affected" : "=" }, { "version_value" : "1.6.0.18-rc1", "version_affected" : "=" }, { "version_value" : "1.6.0.18-rc2", "version_affected" : "=" }, { "version_value" : "1.6.0.18-rc3", "version_affected" : "=" }, { "version_value" : "1.6.0.19", "version_affected" : "=" }, { "version_value" : "1.6.0.20", "version_affected" : "=" }, { "version_value" : "1.6.0.20-rc1", "version_affected" : "=" }, { "version_value" : "1.6.0.21", "version_affected" : "=" }, { "version_value" : "1.6.0.21-rc1", "version_affected" : "=" }, { "version_value" : "1.6.1.0", "version_affected" : "=" }, { "version_value" : "1.6.1.1", "version_affected" : "=" }, { "version_value" : "1.6.1.2", "version_affected" : "=" }, { "version_value" : "1.6.1.4", "version_affected" : "=" }, { "version_value" : "1.6.1.5", "version_affected" : "=" }, { "version_value" : "1.6.1.6", "version_affected" : "=" }, { "version_value" : "1.6.1.7-rc1", "version_affected" : "=" }, { "version_value" : "1.6.1.7-rc2", "version_affected" : "=" }, { "version_value" : "1.6.1.8", "version_affected" : "=" }, { "version_value" : "1.6.1.9", "version_affected" : "=" }, { "version_value" : "1.6.1.10", "version_affected" : "=" }, { "version_value" : "1.6.1.10-rc1", "version_affected" : "=" }, { "version_value" : "1.6.1.10-rc2", "version_affected" : "=" }, { "version_value" : "1.6.1.10-rc3", "version_affected" : "=" }, { "version_value" : "1.6.1.11", "version_affected" : "=" }, { "version_value" : "1.6.1.12", "version_affected" : "=" }, { "version_value" : "1.6.1.12-rc1", "version_affected" : "=" }, { "version_value" : "1.6.1.13", "version_affected" : "=" }, { "version_value" : "1.6.1.13-rc1", "version_affected" : "=" }, { "version_value" : "1.6.2.1", "version_affected" : "=" }, { "version_value" : "1.6.2.1-rc1", "version_affected" : "=" }, { "version_value" : "1.6.10-rc1", "version_affected" : "=" }, { "version_value" : "1.6.10-rc2", "version_affected" : "=" }, { "version_value" : "c.3.1.0", "version_affected" : "=" }, { "version_value" : "c.3.1.1", "version_affected" : "=" }, { "version_value" : "c.3.2.2", "version_affected" : "=" }, { "version_value" : "c.3.3.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://downloads.asterisk.org/pub/security/AST-2010-001.html", "name" : "http://downloads.asterisk.org/pub/security/AST-2010-001.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.0.diff", "name" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.0.diff", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.1.diff", "name" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.1.diff", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.2.diff", "name" : "http://downloads.asterisk.org/pub/security/AST-2010-001-1.6.2.diff", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/037679.html", "name" : "FEDORA-2010-3724", "refsource" : "FEDORA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38395", "name" : "38395", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39096", "name" : "39096", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023532", "name" : "1023532", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509327/100/0/threaded", "name" : "20100202 AST-2010-001: T.38 Remote Crash Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38047", "name" : "38047", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0289", "name" : "ADV-2010-0289", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://issues.asterisk.org/view.php?id=16517", "name" : "https://issues.asterisk.org/view.php?id=16517", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://issues.asterisk.org/view.php?id=16634", "name" : "https://issues.asterisk.org/view.php?id=16634", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://issues.asterisk.org/view.php?id=16724", "name" : "https://issues.asterisk.org/view.php?id=16724", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Asterisk Open Source 1.6.0.x before 1.6.0.22, 1.6.1.x before 1.6.1.14, and 1.6.2.x before 1.6.2.2, and Business Edition C.3 before C.3.3.2, allows remote attackers to cause a denial of service (daemon crash) via an SIP T.38 negotiation with an SDP FaxMaxDatagram field that is (1) missing, (2) modified to contain a negative number, or (3) modified to contain a large number." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.16-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.16-rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.18-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.18-rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.18-rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.20-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.0.21-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.7-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.7-rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.10-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.10-rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.10-rc3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.12-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.1.13-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.2.1-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.10-rc1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:1.6.10-rc2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:c.3.1.0:*:business:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:c.3.1.1:*:business:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:c.3.2.2:*:business:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:asterisk:asterisk:c.3.3.3:*:business:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0442", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "postgresql", "product" : { "product_data" : [ { "product_name" : "postgresql", "version" : { "version_data" : [ { "version_value" : "8.0.23", "version_affected" : "=" }, { "version_value" : "8.1.11", "version_affected" : "=" }, { "version_value" : "8.3.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.postgresql.org/pgsql-committers/2010-01/msg00125.php", "name" : "[pgsql-committers] 20100107 pgsql: Make bit/varbit substring() treat any negative length as meaning", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://archives.postgresql.org/pgsql-hackers/2010-01/msg00634.php", "name" : "[pgsql-hackers] 20100107 Re: Patch: Allow substring/replace() to get/set bit values", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058", "name" : "http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=567058", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=75dea10196c31d98d98c0bafeeb576ae99c09b12", "name" : "http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=75dea10196c31d98d98c0bafeeb576ae99c09b12", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=b15087cb39ca9e4bde3c8920fcee3741045d2b83", "name" : "http://git.postgresql.org/gitweb?p=postgresql.git;a=commit;h=b15087cb39ca9e4bde3c8920fcee3741045d2b83", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html", "name" : "http://intevydis.blogspot.com/2010/01/postgresql-8023-bitsubstr-overflow.html", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39566", "name" : "39566", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39820", "name" : "39820", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39939", "name" : "39939", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023510", "name" : "1023510", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://ubuntu.com/usn/usn-933-1", "name" : "USN-933-1", "refsource" : "UBUNTU", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2010/dsa-2051", "name" : "DSA-2051", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:103", "name" : "MDVSA-2010:103", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.openwall.com/lists/oss-security/2010/01/27/5", "name" : "[oss-security] 20100127 Re: CVE id request: postgresql bitsubstr overflow", "refsource" : "MLIST", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0427.html", "name" : "RHSA-2010:0427", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0428.html", "name" : "RHSA-2010:0428", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2010-0429.html", "name" : "RHSA-2010:0429", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37973", "name" : "37973", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1022", "name" : "ADV-2010-1022", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1197", "name" : "ADV-2010-1197", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1207", "name" : "ADV-2010-1207", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1221", "name" : "ADV-2010-1221", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559194", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559194", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=559259", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=559259", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55902", "name" : "postgresql-substring-bo(55902)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9720", "name" : "oval:org.mitre.oval:def:9720", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The bitsubstr function in backend/utils/adt/varbit.c in PostgreSQL 8.0.23, 8.1.11, and 8.3.8 allows remote authenticated users to cause a denial of service (daemon crash) or have unspecified other impact via vectors involving a negative integer in the third argument, as demonstrated by a SELECT statement that contains a call to the substring function for a bit string, related to an \"overflow.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.0.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:postgresql:postgresql:8.3.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0443", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "openvms_rms", "version" : { "version_data" : [ { "version_value" : "vms83a_rms-v1000", "version_affected" : "=" }, { "version_value" : "vms83a_update-v1100", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" }, { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126520981100671&w=2", "name" : "SSRT100023", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38366", "name" : "38366", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38048", "name" : "38048", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0286", "name" : "ADV-2010-0286", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56062", "name" : "openvms-rms-privilege-escalation(56062)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in Record Management Services (RMS) before VMS83A_RMS-V1100 for HP OpenVMS on the Alpha platform allows local users to gain privileges via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:openvms_rms:vms83a_rms-v1000:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:openvms_rms:vms83a_update-v1100:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:hp:openvms:-:-:alpha:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-04T20:15Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0444", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "operations_agent", "version" : { "version_data" : [ { "version_value" : "8.51", "version_affected" : "=" }, { "version_value" : "8.52", "version_affected" : "=" }, { "version_value" : "8.53", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126566258722040&w=2", "name" : "SSRT100024", "refsource" : "HP", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://osvdb.org/62213", "name" : "62213", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023555", "name" : "1023555", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38150", "name" : "38150", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:operations_agent:8.51:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:operations_agent:8.52:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:operations_agent:8.53:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:hp:operations_agent:8.60:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10:*:sparc:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10:*:x86:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-09T19:30Z", "lastModifiedDate" : "2010-02-13T07:22Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0445", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "network_node_manager", "version" : { "version_data" : [ { "version_value" : "8.10", "version_affected" : "=" }, { "version_value" : "8.11", "version_affected" : "=" }, { "version_value" : "8.12", "version_affected" : "=" }, { "version_value" : "8.13", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126582291202560&w=2", "name" : "SSRT090076", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38528", "name" : "38528", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in HP Network Node Manager (NNM) 8.10, 8.11, 8.12, and 8.13 allows remote attackers to execute arbitrary commands via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:network_node_manager:8.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:network_node_manager:8.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:network_node_manager:8.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:network_node_manager:8.13:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-11T17:30Z", "lastModifiedDate" : "2019-10-09T23:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0446", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "dreamscreen", "version" : { "version_data" : [ { "version_value" : "100", "version_affected" : "=" }, { "version_value" : "130", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126592424225647&w=2", "name" : "SSRT100012", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38536", "name" : "38536", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023581", "name" : "1023581", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38190", "name" : "38190", "refsource" : "BID", "tags" : [ "Patch" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability on the HP DreamScreen 100 and 130 with firmware before 1.6.0.0, when using a web-connected configuration, allows remote attackers to obtain sensitive information via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:dreamscreen:100:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:dreamscreen:130:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-12T19:30Z", "lastModifiedDate" : "2010-02-26T07:11Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0447", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "openview_performance_insight", "version" : { "version_data" : [ { "version_value" : "5.4", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126815897824020&w=2", "name" : "HPSBMA02489", "refsource" : "HP", "tags" : [ ] }, { "url" : "http://osvdb.org/62797", "name" : "62797", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38899", "name" : "38899", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509984/100/0/threaded", "name" : "20100309 ZDI-10-026: Hewlett-Packard OVPI helpmanager Servlet Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38611", "name" : "38611", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0555", "name" : "ADV-2010-0555", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-026", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-026", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56757", "name" : "hp-performance-unspec-command-exec(56757)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The helpmanager servlet in the web server in HP OpenView Performance Insight (OVPI) 5.4 and earlier does not properly authenticate and validate requests, which allows remote attackers to execute arbitrary commands via vectors involving upload of a JSP document." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:openview_performance_insight:*:*:*:*:*:*:*:*", "versionEndIncluding" : "5.4" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-10T22:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0448", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "soa_registry_foundation", "version" : { "version_data" : [ { "version_value" : "6.63", "version_affected" : "=" }, { "version_value" : "6.64", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126996774125378&w=2", "name" : "SSRT090222", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39187", "name" : "39187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39059", "name" : "39059", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023765", "name" : "1023765", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to obtain \"unauthorized access to data\" via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.64:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-31T18:00Z", "lastModifiedDate" : "2019-10-09T23:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0449", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "soa_registry_foundation", "version" : { "version_data" : [ { "version_value" : "6.63", "version_affected" : "=" }, { "version_value" : "6.64", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126996774125378&w=2", "name" : "HPSBMA02490", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39187", "name" : "39187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39060", "name" : "39060", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023765", "name" : "1023765", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote attackers to inject arbitrary web script or HTML via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.64:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:00Z", "lastModifiedDate" : "2019-10-09T23:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0450", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "soa_registry_foundation", "version" : { "version_data" : [ { "version_value" : "6.63", "version_affected" : "=" }, { "version_value" : "6.64", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126996774125378&w=2", "name" : "HPSBMA02490", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39187", "name" : "39187", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39061", "name" : "39061", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023765", "name" : "1023765", "refsource" : "SECTRACK", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Unspecified vulnerability in HP SOA Registry Foundation 6.63 and 6.64 allows remote authenticated users to gain privileges via unknown vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.63:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:soa_registry_foundation:6.64:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "NONE", "baseScore" : 8.5 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 9.2, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-31T18:00Z", "lastModifiedDate" : "2019-10-09T23:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0451", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "hp-ux", "version" : { "version_data" : [ { "version_value" : "11.31", "version_affected" : "=" }, { "version_value" : "b.11.31", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126962272413767&w=2", "name" : "SSRT100032", "refsource" : "HP", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://osvdb.org/63243", "name" : "63243", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39111", "name" : "39111", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023758", "name" : "1023758", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38982", "name" : "38982", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0731", "name" : "ADV-2010-0731", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/57216", "name" : "hpux-oncplus-weak-security(57216)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12025", "name" : "oval:org.mitre.oval:def:12025", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The installation process for NFS/ONCplus B.11.31_08 and earlier on HP HP-UX B.11.31 changes the NFS_SERVER setting in the nfsconf file, which might allow remote attackers to obtain filesystem access via NFS requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:11.31:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:b.11.31:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 4.9, "impactScore" : 4.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-29T22:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0452", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "hp", "product" : { "product_data" : [ { "product_name" : "project_and_portfolio_management_center", "version" : { "version_data" : [ { "version_value" : "7.1", "version_affected" : "<=" }, { "version_value" : "7.5", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://marc.info/?l=bugtraq&m=126953216625011&w=2", "name" : "SSRT080064", "refsource" : "HP", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39105", "name" : "39105", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023749", "name" : "1023749", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.osvdb.org/63175", "name" : "63175", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38961", "name" : "38961", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in HP Project and Portfolio Management Center (PPMC, formerly Mercury IT Governance) 7.1 through SP10 and 7.5 through SP3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:project_and_portfolio_management_center:*:sp10:*:*:*:*:*:*", "versionEndIncluding" : "7.1" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:hp:project_and_portfolio_management_center:*:sp3:*:*:*:*:*:*", "versionEndIncluding" : "7.5" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:hp:hp-ux:b.11.23:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-29T18:30Z", "lastModifiedDate" : "2019-10-09T23:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0453", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sun", "product" : { "product_data" : [ { "product_name" : "opensolaris", "version" : { "version_data" : [ { "version_value" : "snv_69", "version_affected" : "=" }, { "version_value" : "snv_70", "version_affected" : "=" }, { "version_value" : "snv_71", "version_affected" : "=" }, { "version_value" : "snv_72", "version_affected" : "=" }, { "version_value" : "snv_73", "version_affected" : "=" }, { "version_value" : "snv_74", "version_affected" : "=" }, { "version_value" : "snv_75", "version_affected" : "=" }, { "version_value" : "snv_76", "version_affected" : "=" }, { "version_value" : "snv_77", "version_affected" : "=" }, { "version_value" : "snv_78", "version_affected" : "=" }, { "version_value" : "snv_79", "version_affected" : "=" }, { "version_value" : "snv_80", "version_affected" : "=" }, { "version_value" : "snv_81", "version_affected" : "=" }, { "version_value" : "snv_82", "version_affected" : "=" }, { "version_value" : "snv_83", "version_affected" : "=" }, { "version_value" : "snv_84", "version_affected" : "=" }, { "version_value" : "snv_85", "version_affected" : "=" }, { "version_value" : "snv_86", "version_affected" : "=" }, { "version_value" : "snv_87", "version_affected" : "=" }, { "version_value" : "snv_88", "version_affected" : "=" }, { "version_value" : "snv_89", "version_affected" : "=" }, { "version_value" : "snv_90", "version_affected" : "=" }, { "version_value" : "snv_91", "version_affected" : "=" }, { "version_value" : "snv_92", "version_affected" : "=" }, { "version_value" : "snv_93", "version_affected" : "=" }, { "version_value" : "snv_94", "version_affected" : "=" }, { "version_value" : "snv_95", "version_affected" : "=" }, { "version_value" : "snv_96", "version_affected" : "=" }, { "version_value" : "snv_97", "version_affected" : "=" }, { "version_value" : "snv_98", "version_affected" : "=" }, { "version_value" : "snv_99", "version_affected" : "=" }, { "version_value" : "snv_100", "version_affected" : "=" }, { "version_value" : "snv_101", "version_affected" : "=" }, { "version_value" : "snv_102", "version_affected" : "=" }, { "version_value" : "snv_103", "version_affected" : "=" }, { "version_value" : "snv_104", "version_affected" : "=" }, { "version_value" : "snv_105", "version_affected" : "=" }, { "version_value" : "snv_106", "version_affected" : "=" }, { "version_value" : "snv_107", "version_affected" : "=" }, { "version_value" : "snv_108", "version_affected" : "=" }, { "version_value" : "snv_109", "version_affected" : "=" }, { "version_value" : "snv_110", "version_affected" : "=" }, { "version_value" : "snv_111", "version_affected" : "=" }, { "version_value" : "snv_112", "version_affected" : "=" }, { "version_value" : "snv_113", "version_affected" : "=" }, { "version_value" : "snv_114", "version_affected" : "=" }, { "version_value" : "snv_115", "version_affected" : "=" }, { "version_value" : "snv_116", "version_affected" : "=" }, { "version_value" : "snv_117", "version_affected" : "=" }, { "version_value" : "snv_118", "version_affected" : "=" }, { "version_value" : "snv_119", "version_affected" : "=" }, { "version_value" : "snv_120", "version_affected" : "=" }, { "version_value" : "snv_121", "version_affected" : "=" }, { "version_value" : "snv_122", "version_affected" : "=" }, { "version_value" : "snv_123", "version_affected" : "=" }, { "version_value" : "snv_124", "version_affected" : "=" }, { "version_value" : "snv_125", "version_affected" : "=" }, { "version_value" : "snv_126", "version_affected" : "=" }, { "version_value" : "snv_127", "version_affected" : "=" }, { "version_value" : "snv_128", "version_affected" : "=" }, { "version_value" : "snv_129", "version_affected" : "=" }, { "version_value" : "snv_130", "version_affected" : "=" }, { "version_value" : "snv_131", "version_affected" : "=" }, { "version_value" : "snv_132", "version_affected" : "=" }, { "version_value" : "snv_133", "version_affected" : "=" } ] } }, { "product_name" : "solaris", "version" : { "version_data" : [ { "version_value" : "10.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/62046", "name" : "62046", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38452", "name" : "38452", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1", "name" : "http://sunsolve.sun.com/search/document.do?assetkey=1-21-143913-01-1", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-66-275910-1", "name" : "275910", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://sunsolve.sun.com/search/document.do?assetkey=1-77-1021799.1-1", "name" : "1021799", "refsource" : "SUNALERT", "tags" : [ ] }, { "url" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html", "name" : "http://www.oracle.com/technetwork/topics/security/cpuapr2010-099504.html", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509276/100/0/threaded", "name" : "20100131 [TKADV2010-001] Oracle Solaris UCODE_GET_VERSION IOCTL Kernel NULL Pointer Dereference", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38016", "name" : "38016", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.trapkit.de/advisories/TKADV2010-001.txt", "name" : "http://www.trapkit.de/advisories/TKADV2010-001.txt", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103B.html", "name" : "TA10-103B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0270", "name" : "ADV-2010-0270", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55991", "name" : "solaris-microcode-dos(55991)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6959", "name" : "oval:org.mitre.oval:def:6959", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_69:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_70:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_71:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_72:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_73:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_74:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_75:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_76:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_77:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_78:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_79:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_80:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_81:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_82:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_83:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_84:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_85:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_86:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_87:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_88:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_89:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_90:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_91:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_92:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_93:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_94:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_95:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_96:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_97:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_98:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_99:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_100:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_101:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_102:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_103:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_104:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_105:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_106:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_107:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_108:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_109:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_110:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_111:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_112:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_113:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_114:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_115:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_116:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_117:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_118:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_119:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_120:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_121:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_122:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_123:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_124:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_125:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_126:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_127:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_128:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_129:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_130:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_131:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_132:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:opensolaris:snv_133:*:x86:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:sun:solaris:10.0:*:x86:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.9, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0454", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "fabricadigital", "product" : { "product_data" : [ { "product_name" : "publique!", "version" : { "version_data" : [ { "version_value" : "2.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61941", "name" : "61941", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.org/1001-exploits/publique-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/publique-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38302", "name" : "38302", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509142/100/0/threaded", "name" : "20100125 Publique! CMS SQL Injection Vulnerabilities", "refsource" : "BUGTRAQ", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in cgi/cgilua.exe/sys/start.htm in Publique! 2.3 allows remote attackers to execute arbitrary SQL commands via the sid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:fabricadigital:publique\\!:2.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0455", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "punbb", "product" : { "product_data" : [ { "product_name" : "punbb", "version" : { "version_data" : [ { "version_value" : "1.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.packetstormsecurity.com/1001-exploits/punbb13-xss.txt", "name" : "http://www.packetstormsecurity.com/1001-exploits/punbb13-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37930", "name" : "37930", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55853", "name" : "punbb-viewtopic-xss(55853)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote attackers to inject arbitrary web script or HTML via the pid parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:punbb:punbb:1.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0456", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "indianpulses", "product" : { "product_data" : [ { "product_name" : "com_gameserver", "version" : { "version_data" : [ { "version_value" : "1.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.exploit-db.com/exploits/11222", "name" : "11222", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37920", "name" : "37920", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37934", "name" : "37934", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55829", "name" : "gameserver-grp-sql-injection(55829)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the indianpulse Game Server (com_gameserver) component 1.2 for Joomla! allows remote attackers to execute arbitrary SQL commands via the grp parameter in a gameserver action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:indianpulses:com_gameserver:1.2:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0457", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "a3malnet", "product" : { "product_data" : [ { "product_name" : "magic-portal", "version" : { "version_data" : [ { "version_value" : "2.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/magicportal-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/magicportal-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11235", "name" : "11235", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55849", "name" : "magicportal-home-sql-injection(55849)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in home.php in magic-portal 2.1 allows remote attackers to execute arbitrary SQL commands via the id parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:a3malnet:magic-portal:2.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0458", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "netartmedia", "product" : { "product_data" : [ { "product_name" : "blog_system", "version" : { "version_data" : [ { "version_value" : "1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/0512-exploits/blog12SQL.txt", "name" : "http://packetstormsecurity.org/0512-exploits/blog12SQL.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11216", "name" : "11216", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37911", "name" : "37911", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55818", "name" : "blogsystem-index-sql-injection(55818)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55862", "name" : "blogsystem-blog-sql-injection(55862)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple SQL injection vulnerabilities in NetArt Media Blog System 1.5 allow remote attackers to execute arbitrary SQL commands via the (1) cat parameter to index.php and the (2) note parameter to blog.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:netartmedia:blog_system:1.5:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0459", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "yoflash", "product" : { "product_data" : [ { "product_name" : "com_mochigames", "version" : { "version_data" : [ { "version_value" : "0.51", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlamochigames-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlamochigames-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11243", "name" : "11243", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37931", "name" : "37931", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55841", "name" : "mochigames-index-sql-injection(55841)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the Mochigames (com_mochigames) component 0.51 and possibly other versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:yoflash:com_mochigames:0.51:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0460", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "kayako", "product" : { "product_data" : [ { "product_name" : "esupport", "version" : { "version_data" : [ { "version_value" : "3.60.04", "version_affected" : "<=" } ] } }, { "product_name" : "supportsuite", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.00.26", "version_affected" : "=" }, { "version_value" : "3.00.32", "version_affected" : "=" }, { "version_value" : "3.10.00", "version_affected" : "=" }, { "version_value" : "3.10.02", "version_affected" : "=" }, { "version_value" : "3.11.00", "version_affected" : "=" }, { "version_value" : "3.11.01", "version_affected" : "=" }, { "version_value" : "3.20.02", "version_affected" : "=" }, { "version_value" : "3.30", "version_affected" : "=" }, { "version_value" : "3.50.06", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://osvdb.org/61928", "name" : "61928", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.org/1001-advisories/kayako-xss.txt", "name" : "http://packetstormsecurity.org/1001-advisories/kayako-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38322", "name" : "38322", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/509122/100/0/threaded", "name" : "20100121 Kayako SupportSuite Multiple Persistent Cross Site Scripting (Current Versions)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37947", "name" : "37947", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55859", "name" : "supportsuite-contents-xss(55859)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple cross-site scripting (XSS) vulnerabilities in staff/index.php in Kayako SupportSuite 3.60.04 and earlier allow remote authenticated users to inject arbitrary web script or HTML via the (1) subject parameter and (2) contents parameter (aka body) in an insertquestion action. NOTE: some of these details are obtained from third party information." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:esupport:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.60.04" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.00.26:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.00.32:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.10.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.10.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.11.00:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.11.01:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.20.02:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.30:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.30:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:kayako:supportsuite:3.50.06:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 3.5 }, "severity" : "LOW", "exploitabilityScore" : 6.8, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0461", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "joomla", "product" : { "product_data" : [ { "product_name" : "com_casino", "version" : { "version_data" : [ { "version_value" : "1.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/joomlacasino1-sql.txt", "name" : "http://packetstormsecurity.org/1001-exploits/joomlacasino1-sql.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.exploit-db.com/exploits/11237", "name" : "11237", "refsource" : "EXPLOIT-DB", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/37938", "name" : "37938", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55846", "name" : "casino-indexphp-sql-injection(55846)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the casino (com_casino) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a (1) category or (2) player action to index.php." }, { "lang" : "en", "value" : "Exploit PoC reference links indicate a prerequisite of privileged authenticated user." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:joomla:com_casino:1.0:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0462", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "db2", "version" : { "version_data" : [ { "version_value" : "9.1", "version_affected" : "=" }, { "version_value" : "9.5", "version_affected" : "=" }, { "version_value" : "9.7", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT", "name" : "ftp://public.dhe.ibm.com/ps/products/db2/fixes/english-us/aparlist/db2_v95/APARLIST.TXT", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html", "name" : "http://intevydis.blogspot.com/2010/01/ibm-db2-97-heap-overflow.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://securitytracker.com/id?1023509", "name" : "1023509", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37976", "name" : "37976", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC65922", "name" : "IC65922", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC65933", "name" : "IC65933", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC65935", "name" : "IC65935", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21426108", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55899", "name" : "db2-sysibm-bo(55899)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14518", "name" : "oval:org.mitre.oval:def:14518", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in IBM DB2 9.1 before FP9, 9.5 before FP6, and 9.7 before FP2 allows remote authenticated users to have an unspecified impact via a SELECT statement that has a long column name generated with the REPEAT function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp2a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp3a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp4a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp6a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp7:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp7a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.1:fp8:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp2a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp3a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp3b:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp4a:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.5:fp5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.7:fp1:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-28T20:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0463", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "horde", "product" : { "product_data" : [ { "product_name" : "imp", "version" : { "version_data" : [ { "version_value" : "2.0", "version_affected" : "=" }, { "version_value" : "2.2", "version_affected" : "=" }, { "version_value" : "2.2.1", "version_affected" : "=" }, { "version_value" : "2.2.2", "version_affected" : "=" }, { "version_value" : "2.2.3", "version_affected" : "=" }, { "version_value" : "2.2.4", "version_affected" : "=" }, { "version_value" : "2.2.5", "version_affected" : "=" }, { "version_value" : "2.2.6", "version_affected" : "=" }, { "version_value" : "2.2.7", "version_affected" : "=" }, { "version_value" : "2.2.8", "version_affected" : "=" }, { "version_value" : "2.3", "version_affected" : "=" }, { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "3.1", "version_affected" : "=" }, { "version_value" : "3.1.2", "version_affected" : "=" }, { "version_value" : "3.2", "version_affected" : "=" }, { "version_value" : "3.2.1", "version_affected" : "=" }, { "version_value" : "3.2.2", "version_affected" : "=" }, { "version_value" : "3.2.3", "version_affected" : "=" }, { "version_value" : "3.2.4", "version_affected" : "=" }, { "version_value" : "3.2.5", "version_affected" : "=" }, { "version_value" : "3.2.6", "version_affected" : "=" }, { "version_value" : "3.2.7", "version_affected" : "=" }, { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.1.3", "version_affected" : "=" }, { "version_value" : "4.1.5", "version_affected" : "=" }, { "version_value" : "4.1.6", "version_affected" : "=" }, { "version_value" : "4.2", "version_affected" : "=" }, { "version_value" : "4.2.1", "version_affected" : "=" }, { "version_value" : "4.2.2", "version_affected" : "=" }, { "version_value" : "4.3", "version_affected" : "=" }, { "version_value" : "4.3.1", "version_affected" : "=" }, { "version_value" : "4.3.2", "version_affected" : "=" }, { "version_value" : "4.3.3", "version_affected" : "=" }, { "version_value" : "4.3.4", "version_affected" : "=" }, { "version_value" : "4.3.5", "version_affected" : "=" }, { "version_value" : "4.3.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://bugs.horde.org/ticket/8836", "name" : "http://bugs.horde.org/ticket/8836", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56052", "name" : "horde-dns-info-disclosure(56052)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail", "name" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Horde IMP 4.3.6 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:3.2.7:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:4.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:horde:imp:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.3.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-29T18:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0464", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "roundcube", "product" : { "product_data" : [ { "product_name" : "webmail", "version" : { "version_data" : [ { "version_value" : "0.1", "version_affected" : "=" }, { "version_value" : "0.1.1", "version_affected" : "=" }, { "version_value" : "0.2", "version_affected" : "=" }, { "version_value" : "0.2.1", "version_affected" : "=" }, { "version_value" : "0.2.2", "version_affected" : "=" }, { "version_value" : "0.3", "version_affected" : "=" }, { "version_value" : "0.3.1", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://trac.roundcube.net/ticket/1486449", "name" : "http://trac.roundcube.net/ticket/1486449", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:048", "name" : "MDVSA-2010:048", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail", "name" : "https://secure.grepular.com/DNS_Prefetch_Exposure_on_Thunderbird_and_Webmail", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Roundcube 0.3.1 and earlier does not request that the web browser avoid DNS prefetching of domain names contained in e-mail messages, which makes it easier for remote attackers to determine the network location of the webmail user by logging DNS requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:20050811:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:20050820:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:20051007:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:20051021:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2:alpha:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.3:beta:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:0.3:stable:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:roundcube:webmail:*:*:*:*:*:*:*:*", "versionEndIncluding" : "0.3.1" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-01-29T18:30Z", "lastModifiedDate" : "2015-08-24T16:43Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0465", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "sugarcrm", "product" : { "product_data" : [ { "product_name" : "sugarcrm", "version" : { "version_data" : [ { "version_value" : "5.2.0g", "version_affected" : "=" }, { "version_value" : "5.2a", "version_affected" : "=" }, { "version_value" : "5.2c", "version_affected" : "=" }, { "version_value" : "5.2d", "version_affected" : "=" }, { "version_value" : "5.2e", "version_affected" : "=" }, { "version_value" : "5.2f", "version_affected" : "=" }, { "version_value" : "5.2g", "version_affected" : "=" }, { "version_value" : "5.2h", "version_affected" : "=" }, { "version_value" : "5.5", "version_affected" : "=" }, { "version_value" : "5.5.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38962", "name" : "38962", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510116/100/0/threaded", "name" : "20100316 SugarCRM Stored XSS vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38772", "name" : "38772", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4b9ffa7b4ffa", "name" : "http://www.sugarcrm.com/crm/support/bugs.html?task=view&caseID=db4489b7-b5a8-4a6d-555b-4b9ffa7b4ffa", "refsource" : "CONFIRM", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the online Documents functionality in SugarCRM 5.2.x before 5.2.0l and 5.5.x before 5.5.0a allows remote authenticated users to inject arbitrary web script or HTML via the Document Name field." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2.0g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2a:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2f:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2g:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.2h:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.5:beta1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.5:beta2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:sugarcrm:sugarcrm:5.5.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-19T19:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0467", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "chillcreations", "product" : { "product_data" : [ { "product_name" : "com_ccnewsletter", "version" : { "version_data" : [ { "version_value" : "1.0.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/38378", "name" : "38378", "refsource" : "SECUNIA", "tags" : [ "Third Party Advisory" ] }, { "url" : "http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html", "name" : "http://www.chillcreations.com/en/blog/ccnewsletter-joomla-newsletter/ccnewsletter-106-security-release.html", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.exploit-db.com/exploits/11277", "name" : "11277", "refsource" : "EXPLOIT-DB", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.exploit-db.com/exploits/11282", "name" : "11282", "refsource" : "EXPLOIT-DB", "tags" : [ "Third Party Advisory", "VDB Entry" ] }, { "url" : "http://www.securityfocus.com/bid/37987", "name" : "37987", "refsource" : "BID", "tags" : [ "Exploit", "Third Party Advisory", "VDB Entry" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55953", "name" : "ccnewsletter-index-dir-traversal(55953)", "refsource" : "XF", "tags" : [ "Third Party Advisory", "VDB Entry" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in the ccNewsletter (com_ccnewsletter) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a ccnewsletter action to index.php." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:chillcreations:com_ccnewsletter:1.0.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T17:30Z", "lastModifiedDate" : "2019-09-27T16:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0468", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "paperthin", "product" : { "product_data" : [ { "product_name" : "commonspot_content_server", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0601.html", "name" : "20100128 PR09-19: Cross-Site Scripting (XSS) on CommonSpot server", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://osvdb.org/62087", "name" : "62087", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/509239/100/0/threaded", "name" : "20100128 PR09-19: Cross-Site Scripting (XSS) on CommonSpot server", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/37986", "name" : "37986", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55955", "name" : "commonspot-longproc-xss(55955)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in utilities/longproc.cfm in PaperThin CommonSpot Content Server allows remote attackers to inject arbitrary web script or HTML via the url parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:paperthin:commonspot_content_server:-:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-02T17:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0469", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "files2links", "product" : { "product_data" : [ { "product_name" : "f2l_3000_appliance", "version" : { "version_data" : [ { "version_value" : "4.0.0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0499.html", "name" : "20100125 DDIVRT-2009-27 F2L-3000 files2links SQL Injection Vulnerability", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://osvdb.org/61976", "name" : "61976", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt", "name" : "http://packetstormsecurity.org/1001-advisories/DDIVRT-2009-27.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38310", "name" : "38310", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55950", "name" : "f2l3000-login-sql-injection(55950)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in Files2Links F2L 3000 appliance 4.0.0, and possibly other versions and models, allows remote attackers to execute arbitrary SQL commands via unspecified parameters to the login page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:files2links:f2l_3000_appliance:4.0.0:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T17:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0470", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "comtrend", "product" : { "product_data" : [ { "product_name" : "ct-507it_adsl_router", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://packetstormsecurity.org/1001-exploits/comtrend-xss.txt", "name" : "http://packetstormsecurity.org/1001-exploits/comtrend-xss.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38309", "name" : "38309", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/38004", "name" : "38004", "refsource" : "BID", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in scvrtsrv.cmd in Comtrend CT-507IT ADSL Router allows remote attackers to inject arbitrary web script or HTML via the srvName parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:comtrend:ct-507it_adsl_router:*:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-02-02T17:30Z", "lastModifiedDate" : "2010-02-03T05:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0471", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "enanocms", "product" : { "product_data" : [ { "product_name" : "enanocms", "version" : { "version_data" : [ { "version_value" : "0.8.1", "version_affected" : "=" }, { "version_value" : "0.8.2", "version_affected" : "=" }, { "version_value" : "0.8.3", "version_affected" : "=" }, { "version_value" : "0.8.4", "version_affected" : "=" }, { "version_value" : "0.9.1", "version_affected" : "=" }, { "version_value" : "0.9.2", "version_affected" : "=" }, { "version_value" : "0.9.3", "version_affected" : "=" }, { "version_value" : "1.0", "version_affected" : "=" }, { "version_value" : "1.0.1", "version_affected" : "=" }, { "version_value" : "1.0.2", "version_affected" : "=" }, { "version_value" : "1.0.2b1", "version_affected" : "=" }, { "version_value" : "1.0.3", "version_affected" : "=" }, { "version_value" : "1.0.4", "version_affected" : "=" }, { "version_value" : "1.0.5", "version_affected" : "=" }, { "version_value" : "1.0.6", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-89" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://enanocms.org/Release_notes/1.0.6pl1", "name" : "http://enanocms.org/Release_notes/1.0.6pl1", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/38253", "name" : "38253", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/61974", "name" : "61974", "refsource" : "OSVDB", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SQL injection vulnerability in the comment submission interface (includes/comment.php) in Enano CMS before 1.0.6pl1 allows remote attackers to execute arbitrary SQL commands via unspecified parameters." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.8.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.8.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.8.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.8.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.9.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.9.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:0.9.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.2b1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:1.0.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:enanocms:enanocms:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.0.6" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T17:30Z", "lastModifiedDate" : "2010-06-23T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0472", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "ibm", "product" : { "product_data" : [ { "product_name" : "db2", "version" : { "version_data" : [ { "version_value" : "9.7.0.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://intevydis.blogspot.com/2010/01/ibm-db2-97-kuddb2-dos.html", "name" : "http://intevydis.blogspot.com/2010/01/ibm-db2-97-kuddb2-dos.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/38018", "name" : "38018", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg1IC68762", "name" : "IC68762", "refsource" : "AIXAPAR", "tags" : [ ] }, { "url" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298", "name" : "http://www-01.ibm.com/support/docview.wss?uid=swg21432298", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14289", "name" : "oval:org.mitre.oval:def:14289", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "kuddb2 in Tivoli Monitoring for DB2, as distributed in IBM DB2 9.7 FP1 on Linux, allows remote attackers to cause a denial of service (daemon crash) via a certain byte sequence." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:ibm:db2:9.7.0.1:*:linux:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-02T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0475", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "palo_alto_networks", "product" : { "product_data" : [ { "product_name" : "firewall", "version" : { "version_data" : [ { "version_value" : "3.0.8", "version_affected" : "<=" }, { "version_value" : "3.1.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/bugtraq/2010-05/0086.html", "name" : "20100512 Palo Alto Network Vulnerability - Cross-Site Scripting (XSS)", "refsource" : "BUGTRAQ", "tags" : [ "Exploit" ] }, { "url" : "http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page=", "name" : "http://www.jeromiejackson.com/index.php?view=article&id=83:palo-alto-cross-site-scripting-vulnerability&tmpl=component&print=1&layout=default&page=", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://www.securityfocus.com/bid/40113", "name" : "40113", "refsource" : "BID", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/58624", "name" : "paloalto-edituser-xss(58624)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in esp/editUser.esp in the Palo Alto Networks firewall 3.0.x before 3.0.9 and 3.1.x before 3.1.1 allows remote attackers to inject arbitrary web script or HTML via the role parameter." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:palo_alto_networks:firewall:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.0.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:h:palo_alto_networks:firewall:*:*:*:*:*:*:*:*", "versionEndIncluding" : "3.1.0" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-14T19:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0476", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39372", "name" : "39372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39336", "name" : "39336", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020", "name" : "MS10-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6918", "name" : "oval:org.mitre.oval:def:6918", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB client in Microsoft Windows Server 2003 SP2, Vista Gold, SP1, and SP2, and Windows Server 2008 Gold and SP2 allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and reboot) via a crafted SMB transaction response that uses (1) SMBv1 or (2) SMBv2, aka \"SMB Client Response Parsing Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:beta:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0477", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39372", "name" : "39372", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-020", "name" : "MS10-020", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6859", "name" : "oval:org.mitre.oval:def:6859", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The SMB client in Microsoft Windows Server 2008 R2 and Windows 7 does not properly handle (1) SMBv1 and (2) SMBv2 response packets, which allows remote SMB servers and man-in-the-middle attackers to execute arbitrary code via a crafted packet that causes the client to read the entirety of the response, and then improperly interact with the Winsock Kernel (WSK), aka \"SMB Client Message Size Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0478", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-025", "name" : "MS10-025", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7001", "name" : "oval:org.mitre.oval:def:7001", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in nsum.exe in the Windows Media Unicast Service in Media Services for Microsoft Windows 2000 Server SP4 allows remote attackers to execute arbitrary code via crafted packets associated with transport information, aka \"Media Services Stack-based Buffer Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-04-30T14:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0479", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "publisher", "version" : { "version_data" : [ { "version_value" : "2002", "version_affected" : "=" }, { "version_value" : "2003", "version_affected" : "=" }, { "version_value" : "2007", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-023", "name" : "MS10-023", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7141", "name" : "oval:org.mitre.oval:def:7141", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Microsoft Office Publisher 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via a crafted Publisher file, aka \"Microsoft Office Publisher File Conversion TextBox Processing Buffer Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:publisher:2002:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:publisher:2003:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:publisher:2007:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:publisher:2007:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0480", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securityreason.com/securityalert/8336", "name" : "8336", "refsource" : "SREASON", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-026", "name" : "MS10-026", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7441", "name" : "oval:org.mitre.oval:def:7441", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in the MPEG Layer-3 audio codecs in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 Gold and SP2 allow remote attackers to execute arbitrary code via a crafted AVI file, aka \"MPEG Layer-3 Audio Decoder Stack Overflow Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0481", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39373", "name" : "39373", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/39374", "name" : "39374", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6770", "name" : "oval:org.mitre.oval:def:6770", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly translate a registry key's virtual path to its real path, which allows local users to cause a denial of service (reboot) via a crafted application, aka \"Windows Virtual Path Parsing Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0482", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://secunia.com/advisories/39374", "name" : "39374", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://www.securitytracker.com/id?1023850", "name" : "1023850", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-021", "name" : "MS10-021", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7176", "name" : "oval:org.mitre.oval:def:7176", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The kernel in Microsoft Windows Server 2008 R2 and Windows 7 does not properly validate relocation sections of image files, which allows local users to cause a denial of service (reboot) via a crafted file, aka \"Windows Kernel Malformed Image Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:N/I:N/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 4.7 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0483", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx", "name" : "http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx", "name" : "http://blogs.technet.com/msrc/archive/2010/03/01/security-advisory-981169-released.aspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx", "name" : "http://blogs.technet.com/srd/archive/2010/03/01/help-keypress-vulnerability-in-vbscript-enabling-remote-code-execution.aspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt", "name" : "http://isec.pl/vulnerabilities/isec-0027-msgbox-helpfile-ie.txt", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://isec.pl/vulnerabilities10.html", "name" : "http://isec.pl/vulnerabilities10.html", "refsource" : "MISC", "tags" : [ "Exploit" ] }, { "url" : "http://secunia.com/advisories/38727", "name" : "38727", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1023668", "name" : "1023668", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk", "name" : "http://www.computerworld.com/s/article/9163298/New_zero_day_involves_IE_puts_Windows_XP_users_at_risk", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.kb.cert.org/vuls/id/612021", "name" : "VU#612021", "refsource" : "CERT-VN", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.microsoft.com/technet/security/advisory/981169.mspx", "name" : "http://www.microsoft.com/technet/security/advisory/981169.mspx", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.osvdb.org/62632", "name" : "62632", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/38463", "name" : "38463", "refsource" : "BID", "tags" : [ "Exploit" ] }, { "url" : "http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/", "name" : "http://www.theregister.co.uk/2010/03/01/ie_code_execution_bug/", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0485", "name" : "ADV-2010-0485", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-022", "name" : "MS10-022", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/56558", "name" : "ms-win-msgbox-code-execution(56558)", "refsource" : "XF", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7170", "name" : "oval:org.mitre.oval:def:7170", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8654", "name" : "oval:org.mitre.oval:def:8654", "refsource" : "OVAL", "tags" : [ ] }, { "url" : "https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb", "name" : "https://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/browser/ie_winhlp32.rb", "refsource" : "MISC", "tags" : [ "Exploit" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "vbscript.dll in VBScript 5.1, 5.6, 5.7, and 5.8 in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2, when Internet Explorer is used, allows user-assisted remote attackers to execute arbitrary code by referencing a (1) local pathname, (2) UNC share pathname, or (3) WebDAV server with a crafted .hlp file in the fourth argument (aka helpfile argument) to the MsgBox function, leading to code execution involving winhlp32.exe when the F1 key is pressed, aka \"VBScript Help Keypress Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.6 }, "severity" : "HIGH", "exploitabilityScore" : 4.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-03T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0484", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.opera.com/support/kb/view/954/", "name" : "http://www.opera.com/support/kb/view/954/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/511769/100/0/threaded", "name" : "20100608 VUPEN Security Research - Microsoft Windows Kernel \"GetDCEx()\" Memory Corruption Vulnerability (CVE-2010-0484)", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html", "name" : "TA10-159B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032", "name" : "MS10-032", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7609", "name" : "oval:org.mitre.oval:def:7609", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, and Server 2008 Gold and SP2 \"do not properly validate changes in certain kernel objects,\" which allows local users to execute arbitrary code via vectors related to Device Contexts (DC) and the GetDCEx function, aka \"Win32k Improper Data Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-08T22:30Z", "lastModifiedDate" : "2018-10-12T21:56Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0485", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" }, { "version_value" : "r2", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.opera.com/support/kb/view/954/", "name" : "http://www.opera.com/support/kb/view/954/", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-159B.html", "name" : "TA10-159B", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-032", "name" : "MS10-032", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6948", "name" : "oval:org.mitre.oval:def:6948", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Windows kernel-mode drivers in win32k.sys in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista SP1 and SP2, Server 2008 Gold and SP2, Windows 7, and Server 2008 R2 \"do not properly validate all callback parameters when creating a new window,\" which allows local users to execute arbitrary code, aka \"Win32k Window Creation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:r2:*:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.1, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-06-08T22:30Z", "lastModifiedDate" : "2018-10-30T16:27Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0486", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019", "name" : "MS10-019", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6787", "name" : "oval:org.mitre.oval:def:6787", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The WinVerifyTrust function in Authenticode Signature Verification 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows user-assisted remote attackers to execute arbitrary code via a modified (1) Portable Executable (PE) or (2) cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka \"WinVerifyTrust Signature Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0487", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-103A.html", "name" : "TA10-103A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-019", "name" : "MS10-019", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6886", "name" : "oval:org.mitre.oval:def:6886", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Authenticode Signature verification functionality in cabview.dll in Cabinet File Viewer Shell Extension 5.1, 6.0, and 6.1 in Microsoft Windows 2000 SP4, Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista Gold, SP1, and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 does not properly use unspecified fields in a file digest, which allows remote attackers to execute arbitrary code via a modified cabinet (aka .CAB) file that incorrectly appears to have a valid signature, aka \"Cabview Corruption Validation Vulnerability.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x86:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-04-14T16:00Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0488", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://jvn.jp/en/jp/JVN49467403/index.html", "name" : "JVN#49467403", "refsource" : "JVN", "tags" : [ ] }, { "url" : "http://jvndb.jvn.jp/en/contents/2010/JVNDB-2010-000011.html", "name" : "JVNDB-2010-000011", "refsource" : "JVNDB", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39028", "name" : "39028", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7840", "name" : "oval:org.mitre.oval:def:7840", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified \"encoding strings,\" which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka \"Post Encoding Information Disclosure Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 8 is not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0489", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39026", "name" : "39026", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7774", "name" : "oval:org.mitre.oval:def:7774", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka \"Race Condition Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 8 is not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0490", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39031", "name" : "39031", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8302", "name" : "oval:org.mitre.oval:def:8302", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka \"Uninitialized Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 5.01 Service Pack 4 is not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0491", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "5.01", "version_affected" : "=" }, { "version_value" : "6", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=864", "name" : "20100330 Microsoft Internet Explorer 'onreadystatechange' Use After Free Vulnerability", "refsource" : "IDEFENSE", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39027", "name" : "39027", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8421", "name" : "oval:org.mitre.oval:def:8421", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 6 SP1 allows remote attackers to execute arbitrary code by changing unspecified properties of an HTML object that has an onreadystatechange event handler, aka \"HTML Object Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 7 and Internet Explorer 8 are not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:5.01:sp4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0492", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-94" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510506/100/0/threaded", "name" : "20100402 ZDI-10-033: Microsoft Internet Explorer TIME2 Behavior Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39030", "name" : "39030", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-033", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-033", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7722", "name" : "oval:org.mitre.oval:def:7722", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka \"HTML Object Memory Corruption Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 6 and Internet Explorer 7 are not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0493", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0494", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "microsoft", "product" : { "product_data" : [ { "product_name" : "ie", "version" : { "version_data" : [ { "version_value" : "6", "version_affected" : "=" }, { "version_value" : "7", "version_affected" : "=" }, { "version_value" : "8", "version_affected" : "=" }, { "version_value" : "8.0.6001", "version_affected" : "=" } ] } }, { "product_name" : "windows_2000", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_2003_server", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_7", "version" : { "version_data" : [ { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2003", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } }, { "product_name" : "windows_server_2008", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_vista", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } }, { "product_name" : "windows_xp", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" }, { "version_value" : "-", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://securitytracker.com/id?1023773", "name" : "1023773", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39047", "name" : "39047", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-068A.html", "name" : "TA10-068A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.us-cert.gov/cas/techalerts/TA10-089A.html", "name" : "TA10-089A", "refsource" : "CERT", "tags" : [ "US Government Resource" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/0744", "name" : "ADV-2010-0744", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-018", "name" : "MS10-018", "refsource" : "MS", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8553", "name" : "oval:org.mitre.oval:def:8553", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka \"HTML Element Cross-Domain Vulnerability.\"" }, { "lang" : "en", "value" : "Per: http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx\r\n\r\n'Internet Explorer 5.01 Service Pack 4 is not affected by this vulnerability.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:7:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:8.0.6001:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:itanium:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:r2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:-:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:microsoft:ie:6:sp1:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T19:30Z", "lastModifiedDate" : "2019-02-26T14:04Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0495", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ ] } ] }, "references" : { "reference_data" : [ ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2010. Notes: none." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ ] }, "impact" : { }, "publishedDate" : "2017-05-11T14:29Z", "lastModifiedDate" : "2017-05-11T14:29Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0496", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "freebit", "product" : { "product_data" : [ { "product_name" : "serversman", "version" : { "version_data" : [ { "version_value" : "3.1.5", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://archives.neohapsis.com/archives/fulldisclosure/2010-01/0580.html", "name" : "20100127 Apple Iphone/Ipod - Serversman 3.1.5 HTTP Remote DoS exploit", "refsource" : "FULLDISC", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/38315", "name" : "38315", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/55949", "name" : "serversman-iphone-ipod-dos(55949)", "refsource" : "XF", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "FreeBit ServersMan 3.1.5 on Apple iPhone OS 3.1.2, and iPhone OS for iPod touch, allows remote attackers to cause a denial of service (daemon crash) via a HEAD request for the / URI." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:freebit:serversman:3.1.5:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:iphone_os:3.1.2:-:ipodtouch:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-02-03T19:30Z", "lastModifiedDate" : "2017-08-17T01:32Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0497", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Disk Images in Apple Mac OS X before 10.6.3 does not provide the expected warning for an unsafe file type in an internet enabled disk image, which makes it easier for user-assisted remote attackers to execute arbitrary code via a package file type." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T15:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0498", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory Services in Apple Mac OS X before 10.6.3 does not properly perform authorization during processing of record names, which allows local users to gain privileges via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T15:37Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0500", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-20" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Event Monitor in Apple Mac OS X before 10.6.3 does not properly validate hostnames of SSH clients, which allows remote attackers to cause a denial of service (arbitrary client blacklisting) via a crafted DNS PTR record, related to a \"plist injection issue.\"" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:N/I:N/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.8 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0501", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in FTP Server in Apple Mac OS X Server before 10.6.3 allows remote authenticated users to read arbitrary files via crafted filenames." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects Mac OS X Server systems.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0502", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-Other" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "iChat Server in Apple Mac OS X Server before 10.6.3, when group chat is used, does not perform logging for all types of messages, which might allow remote attackers to avoid message auditing via an unspecified selection of message type." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects Mac OS X Server systems." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0503", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Use-after-free vulnerability in iChat Server in Apple Mac OS X Server 10.5.8 allows remote authenticated users to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects Mac OS X Server systems, and does not affect versions 10.6 or later'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T17:07Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0504", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Multiple stack-based buffer overflows in iChat Server in Apple Mac OS X Server before 10.6.3 allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'These issues only affect Mac OS X Server systems.'\r\n" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T17:14Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0505", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510539/100/0/threaded", "name" : "20100405 ZDI-10-058: Apple Mac OS X ImageIO Framework JPEG2000 Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-058", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-058", "refsource" : "MISC", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in ImageIO in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JP2 (JPEG2000) image, related to incorrect calculation and the CGImageReadGetBytesAtOffset function." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0506", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted NEF image." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue does not affect Mac OS X v10.6 systems'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0507", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Buffer overflow in Image RAW in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PEF image." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0508", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "NVD-CWE-noinfo" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mail in Apple Mac OS X before 10.6.3 does not disable the filter rules associated with a deleted mail account, which has unspecified impact and attack vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 10.0 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 10.0, "acInsufInfo" : true, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0509", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "SFLServer in OS Services in Apple Mac OS X before 10.6.3 allows local users to gain privileges via vectors related to use of wheel group membership during access to the home directories of user accounts." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 7.2 }, "severity" : "HIGH", "exploitabilityScore" : 3.9, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0510", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-255" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Password Server in Apple Mac OS X Server before 10.6.3 does not properly perform password replication, which might allow remote authenticated users to obtain login access via an expired password." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects Mac OS X Server systems'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T18:08Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0511", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Podcast Producer in Apple Mac OS X 10.6 before 10.6.3 deletes the access restrictions of a Podcast Composer workflow when this workflow is overwritten, which allows attackers to access a workflow via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-03-31T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0512", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39153", "name" : "39153", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects systems configured to use a network account server, and does not affect systems prior to Mac OS X v10.6.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-05-21T05:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0513", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://osvdb.org/63409", "name" : "63409", "refsource" : "OSVDB", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/39151", "name" : "39151", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Stack-based buffer overflow in PS Normalizer in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PostScript document." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'On Mac OS X v10.6 systems this issue is mitigated by the -fstack-protector compiler flag.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-04-09T05:42Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0514", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7043", "name" : "oval:org.mitre.oval:def:7043", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.261 encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0515", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6783", "name" : "oval:org.mitre.oval:def:6783", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with H.264 encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0516", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510513/100/0/threaded", "name" : "20100402 ZDI-10-040: Apple QuickTime RLE Bit Depth Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-040", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-040", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7062", "name" : "oval:org.mitre.oval:def:7062", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with RLE encoding, which triggers memory corruption when the length of decompressed data exceeds that of the allocated heap chunk." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0517", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510511/100/0/threaded", "name" : "20100402 ZDI-10-037: Apple QuickTime MJPEG Sample Dimensions Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-037", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-037", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6673", "name" : "oval:org.mitre.oval:def:6673", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with M-JPEG encoding, which causes QuickTime to calculate a buffer size using height and width fields, but to use a different field to control the length of a copy operation." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0518", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7077", "name" : "oval:org.mitre.oval:def:7077", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with Sorenson encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0519", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510519/100/0/threaded", "name" : "20100402 ZDI-10-043: Apple QuickTime FlashPix NumberOfTiles Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-043", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-043", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7498", "name" : "oval:org.mitre.oval:def:7498", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0520", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510520/100/0/threaded", "name" : "20100402 ZDI-10-044: Apple QuickTime FLI LinePacket Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-044", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-044", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6801", "name" : "oval:org.mitre.oval:def:6801", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:52Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0521", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5", "version_affected" : "=" }, { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-287" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Server Admin in Apple Mac OS X Server before 10.6.3 does not properly enforce authentication for directory binding, which allows remote attackers to obtain potentially sensitive information from Open Directory via unspecified LDAP requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0522", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Server Admin in Apple Mac OS X Server 10.5.8 does not properly determine the privileges of users who had former membership in the admin group, which allows remote authenticated users to leverage this former membership to obtain a server connection via screen sharing." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.0 }, "severity" : "HIGH", "exploitabilityScore" : 8.0, "impactScore" : 10.0, "obtainAllPrivilege" : true, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0523", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-200" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wiki Server in Apple Mac OS X 10.5.8 does not restrict the file types of uploaded files, which allows remote attackers to obtain sensitive information or possibly have unspecified other impact via a crafted file, as demonstrated by a Java applet." }, { "lang" : "en", "value" : "Per: http://support.apple.com/kb/HT4077\r\n\r\n'This issue only affects Mac OS X Server systems, and does not affect versions 10.6 or later.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0524", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/39234", "name" : "39234", "refsource" : "BID", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The default configuration of the FreeRADIUS server in Apple Mac OS X Server before 10.6.3 permits EAP-TLS authenticated connections on the basis of an arbitrary client certificate, which allows remote attackers to obtain network connectivity via a crafted RADIUS Access Request message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : true, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-05-21T05:57Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0525", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.0", "version_affected" : "=" }, { "version_value" : "10.5.1", "version_affected" : "=" }, { "version_value" : "10.5.2", "version_affected" : "=" }, { "version_value" : "10.5.3", "version_affected" : "=" }, { "version_value" : "10.5.4", "version_affected" : "=" }, { "version_value" : "10.5.5", "version_affected" : "=" }, { "version_value" : "10.5.6", "version_affected" : "=" }, { "version_value" : "10.5.7", "version_affected" : "=" }, { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-310" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Mail in Apple Mac OS X before 10.6.3 does not properly enforce the key usage extension during processing of a keychain that specifies multiple certificates for an e-mail recipient, which might make it easier for remote attackers to obtain sensitive information via a brute-force attack on a weakly encrypted e-mail message." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 5.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 10.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0526", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510508/100/0/threaded", "name" : "20100402 ZDI-10-035: Apple QuickTime genl Atom Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/archive/1/510530/100/0/threaded", "name" : "20100402 ZDI-10-045: Apple QuickTime MPEG-1 genl Atom Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-035", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-035", "refsource" : "MISC", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-045", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-045", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6927", "name" : "oval:org.mitre.oval:def:6927", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTimeMPEG.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted genl atom in a QuickTime movie file with MPEG encoding, which is not properly handled during decompression." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2018-10-10T19:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0527", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.5", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7458", "name" : "oval:org.mitre.oval:def:7458", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer overflow in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted PICT image." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html\r\n\r\n'This issue does not affect Mac OS X systems'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "7.6.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0528", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.5", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "<=" }, { "version_value" : "7.6.1", "version_affected" : "=" }, { "version_value" : "7.6.6", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510518/100/0/threaded", "name" : "20100402 ZDI-10-042: Apple QuickTime MediaVideo Compressor Name Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-042", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-042", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6989", "name" : "oval:org.mitre.oval:def:6989", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted color tables in a movie file, related to malformed MediaVideo data, a sample description atom (STSD), and a crafted length value." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html\r\n\r\n'This issue does not affect Mac OS X systems.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "7.6.0" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.6:-:windows:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2018-10-10T19:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0529", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.5", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/archive/1/510569/100/0/threaded", "name" : "20100406 ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability", "refsource" : "BUGTRAQ", "tags" : [ ] }, { "url" : "http://www.zerodayinitiative.com/advisories/ZDI-10-067", "name" : "http://www.zerodayinitiative.com/advisories/ZDI-10-067", "refsource" : "MISC", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6780", "name" : "oval:org.mitre.oval:def:6780", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html\r\n\r\n'This issue does not affect Mac OS X systems.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "7.6.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2018-10-10T19:53Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0530", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime", "version" : { "version_data" : [ { "version_value" : "3.0", "version_affected" : "=" }, { "version_value" : "4.1.2", "version_affected" : "=" }, { "version_value" : "5.0", "version_affected" : "=" }, { "version_value" : "5.0.1", "version_affected" : "=" }, { "version_value" : "5.0.2", "version_affected" : "=" }, { "version_value" : "6.0", "version_affected" : "=" }, { "version_value" : "6.0.0", "version_affected" : "=" }, { "version_value" : "6.0.1", "version_affected" : "=" }, { "version_value" : "6.0.2", "version_affected" : "=" }, { "version_value" : "6.1", "version_affected" : "=" }, { "version_value" : "6.1.0", "version_affected" : "=" }, { "version_value" : "6.1.1", "version_affected" : "=" }, { "version_value" : "6.2.0", "version_affected" : "=" }, { "version_value" : "6.3.0", "version_affected" : "=" }, { "version_value" : "6.4.0", "version_affected" : "=" }, { "version_value" : "6.5", "version_affected" : "=" }, { "version_value" : "6.5.0", "version_affected" : "=" }, { "version_value" : "6.5.1", "version_affected" : "=" }, { "version_value" : "6.5.2", "version_affected" : "=" }, { "version_value" : "7.0", "version_affected" : "=" }, { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.1", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.2", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.3", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.3.1.70", "version_affected" : "=" }, { "version_value" : "7.4", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.5", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "=" }, { "version_value" : "7.6.1", "version_affected" : "=" }, { "version_value" : "7.6.2", "version_affected" : "=" }, { "version_value" : "7.6.5", "version_affected" : "=" }, { "version_value" : "7.6.6", "version_affected" : "=" }, { "version_value" : "7.6.7", "version_affected" : "=" }, { "version_value" : "7.6.8", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Dec/msg00000.html", "name" : "APPLE-SA-2010-12-07-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4447", "name" : "http://support.apple.com/kb/HT4447", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://www.securitytracker.com/id?1024829", "name" : "1024829", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16036", "name" : "oval:org.mitre.oval:def:16036", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple QuickTime before 7.6.9 on Windows sets weak permissions for the Apple Computer directory in the profile of a user account, which allows local users to obtain sensitive information by reading files in this directory." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:4.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:5.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:5.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:6.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1.70:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.6.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:*:*:*:*:*:*:*:*", "versionEndIncluding" : "7.6.8" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:L/Au:N/C:P/I:N/A:N", "accessVector" : "LOCAL", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.1 }, "severity" : "LOW", "exploitabilityScore" : 3.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-12-09T20:00Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0531", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "itunes", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7427", "name" : "oval:org.mitre.oval:def:7427", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0:-:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.0:-:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.1:-:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.2:-:mac:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:*:-:mac:*:*:*:*:*", "versionEndIncluding" : "9.0.3" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "9.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.4.11:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:N/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "NONE", "availabilityImpact" : "PARTIAL", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0532", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "itunes", "version" : { "version_data" : [ { "version_value" : "9.0", "version_affected" : "=" }, { "version_value" : "9.0.0", "version_affected" : "=" }, { "version_value" : "9.0.1", "version_affected" : "=" }, { "version_value" : "9.0.2", "version_affected" : "=" }, { "version_value" : "9.0.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-362" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html", "name" : "APPLE-SA-2010-03-30-2", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39135", "name" : "39135", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4105", "name" : "http://support.apple.com/kb/HT4105", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7110", "name" : "oval:org.mitre.oval:def:7110", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html\r\n\r\n'This issue does not affect Mac OS X systems.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:9.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "9.0.3" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:L/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "LOCAL", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 6.9 }, "severity" : "MEDIUM", "exploitabilityScore" : 3.4, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0533", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-22" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Directory traversal vulnerability in AFP Server in Apple Mac OS X before 10.6.3 allows remote attackers to list a share root's parent directory, and read and modify files in that directory, via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:*:*:*:*:*:*:*:*", "versionEndIncluding" : "10.6.2" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 7.5 }, "severity" : "HIGH", "exploitabilityScore" : 10.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T17:30Z", "lastModifiedDate" : "2013-09-10T17:18Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0534", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Wiki Server in Apple Mac OS X 10.6 before 10.6.3 does not enforce the service access control list (SACL) for weblogs during weblog creation, which allows remote authenticated users to publish content via HTTP requests." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0535", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Dovecot in Apple Mac OS X 10.6 before 10.6.3, when Kerberos is enabled, does not properly enforce the service access control list (SACL) for sending and receiving e-mail, which allows remote authenticated users to bypass intended access restrictions via unspecified vectors." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:L/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "LOW", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.5 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.0, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : true, "userInteractionRequired" : false } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-21T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0536", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "quicktime", "version" : { "version_data" : [ { "version_value" : "7.0.0", "version_affected" : "=" }, { "version_value" : "7.0.1", "version_affected" : "=" }, { "version_value" : "7.0.2", "version_affected" : "=" }, { "version_value" : "7.0.3", "version_affected" : "=" }, { "version_value" : "7.0.4", "version_affected" : "=" }, { "version_value" : "7.1.0", "version_affected" : "=" }, { "version_value" : "7.1.1", "version_affected" : "=" }, { "version_value" : "7.1.2", "version_affected" : "=" }, { "version_value" : "7.1.3", "version_affected" : "=" }, { "version_value" : "7.1.4", "version_affected" : "=" }, { "version_value" : "7.1.5", "version_affected" : "=" }, { "version_value" : "7.1.6", "version_affected" : "=" }, { "version_value" : "7.2.0", "version_affected" : "=" }, { "version_value" : "7.2.1", "version_affected" : "=" }, { "version_value" : "7.3.0", "version_affected" : "=" }, { "version_value" : "7.3.1", "version_affected" : "=" }, { "version_value" : "7.4.0", "version_affected" : "=" }, { "version_value" : "7.4.1", "version_affected" : "=" }, { "version_value" : "7.4.5", "version_affected" : "=" }, { "version_value" : "7.5.0", "version_affected" : "=" }, { "version_value" : "7.5.5", "version_affected" : "=" }, { "version_value" : "7.6.0", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html", "name" : "APPLE-SA-2010-03-30-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6969", "name" : "oval:org.mitre.oval:def:6969", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted BMP image." }, { "lang" : "en", "value" : "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00002.html\r\n\r\n' This issue does not affect Mac OS X systems.'" } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.0.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.2:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.3:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.4:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.1.6:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.2.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.3.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.1:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.4.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.0:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:7.5.5:-:windows:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:quicktime:*:-:windows:*:*:*:*:*", "versionEndIncluding" : "7.6.0" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:C/I:C/A:C", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "COMPLETE", "integrityImpact" : "COMPLETE", "availabilityImpact" : "COMPLETE", "baseScore" : 9.3 }, "severity" : "HIGH", "exploitabilityScore" : 8.6, "impactScore" : 10.0, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-31T18:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0537", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html", "name" : "APPLE-SA-2010-03-29-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4077", "name" : "http://support.apple.com/kb/HT4077", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "DesktopServices in Apple Mac OS X 10.6 before 10.6.3 does not properly resolve pathnames in certain circumstances involving an application's save panel, which allows user-assisted remote attackers to trigger unintended remote file copying via a crafted share name." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:H/Au:N/C:P/I:N/A:N", "accessVector" : "NETWORK", "accessComplexity" : "HIGH", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "NONE", "availabilityImpact" : "NONE", "baseScore" : 2.6 }, "severity" : "LOW", "exploitabilityScore" : 4.9, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-03-30T18:30Z", "lastModifiedDate" : "2010-06-18T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0538", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "java", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-399" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024011", "name" : "1024011", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/40238", "name" : "40238", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 do not properly handle mediaLibImage objects, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted applet, related to the com.sun.medialib.mlib package." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:java:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:java:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-21T19:30Z", "lastModifiedDate" : "2010-05-24T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0539", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "java_1.5", "version" : { "version_data" : [ { "version_value" : "0", "version_affected" : "=" } ] } }, { "product_name" : "java_1.6", "version" : { "version_data" : [ { "version_value" : "0", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-189" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00001.html", "name" : "APPLE-SA-2010-05-18-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//May/msg00002.html", "name" : "APPLE-SA-2010-05-18-2", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/39819", "name" : "39819", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024012", "name" : "1024012", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4170", "name" : "http://support.apple.com/kb/HT4170", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4171", "name" : "http://support.apple.com/kb/HT4171", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/40240", "name" : "40240", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1191", "name" : "ADV-2010-1191", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Integer signedness error in the window drawing implementation in Apple Java for Mac OS X 10.5 before Update 7 and Java for Mac OS X 10.6 before Update 2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted applet." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:java_1.5:0:23:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" } ] } ] }, { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:java_1.6:0:17:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" } ] } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-05-21T19:30Z", "lastModifiedDate" : "2010-05-24T04:00Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0540", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-352" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cups.org/articles.php?L596", "name" : "http://cups.org/articles.php?L596", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://cups.org/str.php?L3498", "name" : "http://cups.org/str.php?L3498", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/43521", "name" : "43521", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201207-10.xml", "name" : "GLSA-201207-10", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.debian.org/security/2011/dsa-2176", "name" : "DSA-2176", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:232", "name" : "MDVSA-2010:232", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:233", "name" : "MDVSA-2010:233", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:234", "name" : "MDVSA-2010:234", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40871", "name" : "40871", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securitytracker.com/id?1024122", "name" : "1024122", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0535", "name" : "ADV-2011-0535", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10382", "name" : "oval:org.mitre.oval:def:10382", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site request forgery (CSRF) vulnerability in the web interface in CUPS before 1.4.4, as used on Apple Mac OS X 10.5.8, Mac OS X 10.6 before 10.6.4, and other platforms, allows remote attackers to hijack the authentication of administrators for requests that change settings." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:S/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "SINGLE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.0 }, "severity" : "MEDIUM", "exploitabilityScore" : 6.8, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-17T16:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0541", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" }, { "version_value" : "10.6.2", "version_affected" : "=" }, { "version_value" : "10.6.3", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:097", "name" : "MDVSA-2011:097", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2011:098", "name" : "MDVSA-2011:098", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2011-0908.html", "name" : "RHSA-2011:0908", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.redhat.com/support/errata/RHSA-2011-0909.html", "name" : "RHSA-2011:0909", "refsource" : "REDHAT", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40871", "name" : "40871", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.securityfocus.com/bid/40895", "name" : "40895", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in the WEBrick HTTP server in Ruby in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows remote attackers to inject arbitrary web script or HTML via a crafted URI that triggers a UTF-7 error page." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.3:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:N/I:P/A:N", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "NONE", "integrityImpact" : "PARTIAL", "availabilityImpact" : "NONE", "baseScore" : 4.3 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 2.9, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-17T16:30Z", "lastModifiedDate" : "2012-11-06T04:36Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0542", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "cups", "version" : { "version_data" : [ { "version_value" : "1.1", "version_affected" : "=" }, { "version_value" : "1.1.1", "version_affected" : "=" }, { "version_value" : "1.1.2", "version_affected" : "=" }, { "version_value" : "1.1.3", "version_affected" : "=" }, { "version_value" : "1.1.4", "version_affected" : "=" }, { "version_value" : "1.1.5", "version_affected" : "=" }, { "version_value" : "1.1.5-1", "version_affected" : "=" }, { "version_value" : "1.1.5-2", "version_affected" : "=" }, { "version_value" : "1.1.6", "version_affected" : "=" }, { "version_value" : "1.1.6-1", "version_affected" : "=" }, { "version_value" : "1.1.6-2", "version_affected" : "=" }, { "version_value" : "1.1.6-3", "version_affected" : "=" }, { "version_value" : "1.1.7", "version_affected" : "=" }, { "version_value" : "1.1.8", "version_affected" : "=" }, { "version_value" : "1.1.9", "version_affected" : "=" }, { "version_value" : "1.1.9-1", "version_affected" : "=" }, { "version_value" : "1.1.10", "version_affected" : "=" }, { "version_value" : "1.1.10-1", "version_affected" : "=" }, { "version_value" : "1.1.11", "version_affected" : "=" }, { "version_value" : "1.1.12", "version_affected" : "=" }, { "version_value" : "1.1.13", "version_affected" : "=" }, { "version_value" : "1.1.14", "version_affected" : "=" }, { "version_value" : "1.1.15", "version_affected" : "=" }, { "version_value" : "1.1.16", "version_affected" : "=" }, { "version_value" : "1.1.17", "version_affected" : "=" }, { "version_value" : "1.1.18", "version_affected" : "=" }, { "version_value" : "1.1.19", "version_affected" : "=" }, { "version_value" : "1.1.20", "version_affected" : "=" }, { "version_value" : "1.1.21", "version_affected" : "=" }, { "version_value" : "1.1.22", "version_affected" : "=" }, { "version_value" : "1.1.23", "version_affected" : "=" }, { "version_value" : "1.2", "version_affected" : "=" }, { "version_value" : "1.2.0", "version_affected" : "=" }, { "version_value" : "1.2.1", "version_affected" : "=" }, { "version_value" : "1.2.2", "version_affected" : "=" }, { "version_value" : "1.2.3", "version_affected" : "=" }, { "version_value" : "1.2.4", "version_affected" : "=" }, { "version_value" : "1.2.5", "version_affected" : "=" }, { "version_value" : "1.2.6", "version_affected" : "=" }, { "version_value" : "1.2.7", "version_affected" : "=" }, { "version_value" : "1.2.8", "version_affected" : "=" }, { "version_value" : "1.2.9", "version_affected" : "=" }, { "version_value" : "1.2.10", "version_affected" : "=" }, { "version_value" : "1.2.11", "version_affected" : "=" }, { "version_value" : "1.2.12", "version_affected" : "=" }, { "version_value" : "1.3", "version_affected" : "=" }, { "version_value" : "1.3.0", "version_affected" : "=" }, { "version_value" : "1.3.1", "version_affected" : "=" }, { "version_value" : "1.3.2", "version_affected" : "=" }, { "version_value" : "1.3.3", "version_affected" : "=" }, { "version_value" : "1.3.4", "version_affected" : "=" }, { "version_value" : "1.3.5", "version_affected" : "=" }, { "version_value" : "1.3.6", "version_affected" : "=" }, { "version_value" : "1.3.7", "version_affected" : "=" }, { "version_value" : "1.3.8", "version_affected" : "=" }, { "version_value" : "1.3.9", "version_affected" : "=" }, { "version_value" : "1.3.10", "version_affected" : "=" }, { "version_value" : "1.3.11", "version_affected" : "=" }, { "version_value" : "1.4.0", "version_affected" : "=" }, { "version_value" : "1.4.1", "version_affected" : "=" }, { "version_value" : "1.4.2", "version_affected" : "=" }, { "version_value" : "1.4.3", "version_affected" : "<=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-264" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://cups.org/articles.php?L596", "name" : "http://cups.org/articles.php?L596", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://cups.org/str.php?L3516", "name" : "http://cups.org/str.php?L3516", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://cups.org/strfiles/3516/str3516.patch", "name" : "http://cups.org/strfiles/3516/str3516.patch", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "http://lists.opensuse.org/opensuse-security-announce/2010-12/msg00000.html", "name" : "SUSE-SR:2010:023", "refsource" : "SUSE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/43521", "name" : "43521", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://security.gentoo.org/glsa/glsa-201207-10.xml", "name" : "GLSA-201207-10", "refsource" : "GENTOO", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1024121", "name" : "1024121", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://www.debian.org/security/2011/dsa-2176", "name" : "DSA-2176", "refsource" : "DEBIAN", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:232", "name" : "MDVSA-2010:232", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2010:234", "name" : "MDVSA-2010:234", "refsource" : "MANDRIVA", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40943", "name" : "40943", "refsource" : "BID", "tags" : [ ] }, { "url" : "http://www.vupen.com/english/advisories/2011/0535", "name" : "ADV-2011-0535", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=587746", "name" : "https://bugzilla.redhat.com/show_bug.cgi?id=587746", "refsource" : "CONFIRM", "tags" : [ "Patch" ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10365", "name" : "oval:org.mitre.oval:def:10365", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "The _WriteProlog function in texttops.c in texttops in the Text Filter subsystem in CUPS before 1.4.4 does not check the return values of certain calloc calls, which allows remote attackers to cause a denial of service (NULL pointer dereference or heap memory corruption) or possibly execute arbitrary code via a crafted file." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.5-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.5-2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.6-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.6-2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.6-3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.9-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.10-1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.13:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.14:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.15:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.16:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.17:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.18:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.19:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc4:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc5:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.20:rc6:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.21:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.21:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.21:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.22:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.22:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.22:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.23:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.1.23:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2:b2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2:rc3:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.2.12:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3:b1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3:rc1:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3:rc2:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.5:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.6:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.7:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.9:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.10:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.3.11:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.4.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:1.4.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:cups:*:*:*:*:*:*:*:*", "versionEndIncluding" : "1.4.3" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-21T16:30Z", "lastModifiedDate" : "2017-09-19T01:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0543", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "mac_os_x", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" } ] } }, { "product_name" : "mac_os_x_server", "version" : { "version_data" : [ { "version_value" : "10.5.8", "version_affected" : "=" }, { "version_value" : "10.6.0", "version_affected" : "=" }, { "version_value" : "10.6.1", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-119" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00001.html", "name" : "APPLE-SA-2010-06-15-1", "refsource" : "APPLE", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40220", "name" : "40220", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://securitytracker.com/id?1024103", "name" : "1024103", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4188", "name" : "http://support.apple.com/kb/HT4188", "refsource" : "CONFIRM", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.securityfocus.com/bid/40871", "name" : "40871", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1481", "name" : "ADV-2010-1481", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "ImageIO in Apple Mac OS X 10.5.8, and 10.6 before 10.6.2, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file with MPEG2 encoding." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" } ] } ] }, "impact" : { "baseMetricV2" : { "cvssV2" : { "version" : "2.0", "vectorString" : "AV:N/AC:M/Au:N/C:P/I:P/A:P", "accessVector" : "NETWORK", "accessComplexity" : "MEDIUM", "authentication" : "NONE", "confidentialityImpact" : "PARTIAL", "integrityImpact" : "PARTIAL", "availabilityImpact" : "PARTIAL", "baseScore" : 6.8 }, "severity" : "MEDIUM", "exploitabilityScore" : 8.6, "impactScore" : 6.4, "obtainAllPrivilege" : false, "obtainUserPrivilege" : false, "obtainOtherPrivilege" : false, "userInteractionRequired" : true } }, "publishedDate" : "2010-06-17T16:30Z", "lastModifiedDate" : "2010-06-17T16:30Z" }, { "cve" : { "data_type" : "CVE", "data_format" : "MITRE", "data_version" : "4.0", "CVE_data_meta" : { "ID" : "CVE-2010-0544", "ASSIGNER" : "cve@mitre.org" }, "affects" : { "vendor" : { "vendor_data" : [ { "vendor_name" : "apple", "product" : { "product_data" : [ { "product_name" : "safari", "version" : { "version_data" : [ { "version_value" : "4.0", "version_affected" : "=" }, { "version_value" : "4.0.0b", "version_affected" : "=" }, { "version_value" : "4.0.1", "version_affected" : "=" }, { "version_value" : "4.0.2", "version_affected" : "=" }, { "version_value" : "4.0.3", "version_affected" : "=" }, { "version_value" : "4.0.4", "version_affected" : "=" }, { "version_value" : "4.0.5", "version_affected" : "<=" } ] } }, { "product_name" : "webkit", "version" : { "version_data" : [ { "version_value" : "*", "version_affected" : "=" } ] } } ] } } ] } }, "problemtype" : { "problemtype_data" : [ { "description" : [ { "lang" : "en", "value" : "CWE-79" } ] } ] }, "references" : { "reference_data" : [ { "url" : "http://lists.apple.com/archives/security-announce/2010//Jun/msg00002.html", "name" : "APPLE-SA-2010-06-16-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html", "name" : "APPLE-SA-2010-11-22-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00000.html", "name" : "APPLE-SA-2010-06-07-1", "refsource" : "APPLE", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://lists.apple.com/archives/security-announce/2010/Jun/msg00003.html", "name" : "APPLE-SA-2010-06-21-1", "refsource" : "APPLE", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/40105", "name" : "40105", "refsource" : "SECUNIA", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://secunia.com/advisories/40196", "name" : "40196", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://secunia.com/advisories/42314", "name" : "42314", "refsource" : "SECUNIA", "tags" : [ ] }, { "url" : "http://securitytracker.com/id?1024067", "name" : "1024067", "refsource" : "SECTRACK", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4196", "name" : "http://support.apple.com/kb/HT4196", "refsource" : "CONFIRM", "tags" : [ "Vendor Advisory" ] }, { "url" : "http://support.apple.com/kb/HT4220", "name" : "http://support.apple.com/kb/HT4220", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4225", "name" : "http://support.apple.com/kb/HT4225", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://support.apple.com/kb/HT4456", "name" : "http://support.apple.com/kb/HT4456", "refsource" : "CONFIRM", "tags" : [ ] }, { "url" : "http://www.securityfocus.com/bid/40620", "name" : "40620", "refsource" : "BID", "tags" : [ "Patch" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1373", "name" : "ADV-2010-1373", "refsource" : "VUPEN", "tags" : [ "Patch", "Vendor Advisory" ] }, { "url" : "http://www.vupen.com/english/advisories/2010/1512", "name" : "ADV-2010-1512", "refsource" : "VUPEN", "tags" : [ ] }, { "url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6656", "name" : "oval:org.mitre.oval:def:6656", "refsource" : "OVAL", "tags" : [ ] } ] }, "description" : { "description_data" : [ { "lang" : "en", "value" : "Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to inject arbitrary web script or HTML via vectors related to a malformed URL." } ] } }, "configurations" : { "CVE_data_version" : "4.0", "nodes" : [ { "operator" : "AND", "children" : [ { "operator" : "OR", "cpe_match" : [ { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.0b:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.1:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.2:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.3:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:4.0.4:*:*:*:*:*:*:*" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*", "versionEndIncluding" : "4.0.5" }, { "vulnerable" : true, "cpe23Uri" : "cpe:2.3:a:apple:webkit:*:*:*:*:*:*:*:*" } ] }, { "operator" : "OR", "cpe_match" : [ { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x:10.6.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.6:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.7:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.5.8:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.0:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.1:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x_server:10.6.2:*:*:*:*:*:*:*" }, { "vulnerable" : false, "cpe23Uri" : "cpe:2.3:o:apple:mac_os_x