ByteOS

cpe:2.3:a:sun:jdk:1.5.0:-:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update1:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update10:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update11:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update12:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update13:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update14:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update2:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update3:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update4:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update5:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update6:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update7:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update8:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.5.0:update9:*:*:*:*:*:*

>>jdk>>1.5.0

cpe:2.3:a:sun:jdk:1.6.0:-:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_3:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jdk:1.6.0:update_4:*:*:*:*:*:*

>>jdk>>1.6.0

cpe:2.3:a:sun:jre:1.4.2:*:*:*:*:*:*:*

>>jre>>1.4.2

cpe:2.3:a:sun:jre:1.4.2_1:*:*:*:*:*:*:*

>>jre>>1.4.2_1

cpe:2.3:a:sun:jre:1.4.2_2:*:*:*:*:*:*:*

>>jre>>1.4.2_2

cpe:2.3:a:sun:jre:1.4.2_3:*:*:*:*:*:*:*

>>jre>>1.4.2_3

cpe:2.3:a:sun:jre:1.4.2_4:*:*:*:*:*:*:*

>>jre>>1.4.2_4

cpe:2.3:a:sun:jre:1.4.2_5:*:*:*:*:*:*:*

>>jre>>1.4.2_5

cpe:2.3:a:sun:jre:1.4.2_6:*:*:*:*:*:*:*

>>jre>>1.4.2_6

cpe:2.3:a:sun:jre:1.4.2_7:*:*:*:*:*:*:*

>>jre>>1.4.2_7

cpe:2.3:a:sun:jre:1.4.2_8:*:*:*:*:*:*:*

>>jre>>1.4.2_8

cpe:2.3:a:sun:jre:1.4.2_9:*:*:*:*:*:*:*

>>jre>>1.4.2_9

cpe:2.3:a:sun:jre:1.4.2_10:*:*:*:*:*:*:*

>>jre>>1.4.2_10

cpe:2.3:a:sun:jre:1.4.2_11:*:*:*:*:*:*:*

>>jre>>1.4.2_11

cpe:2.3:a:sun:jre:1.4.2_12:*:*:*:*:*:*:*

>>jre>>1.4.2_12

cpe:2.3:a:sun:jre:1.4.2_13:*:*:*:*:*:*:*

>>jre>>1.4.2_13

cpe:2.3:a:sun:jre:1.4.2_14:*:*:*:*:*:*:*

>>jre>>1.4.2_14

cpe:2.3:a:sun:jre:1.4.2_15:*:*:*:*:*:*:*

>>jre>>1.4.2_15

cpe:2.3:a:sun:jre:1.4.2_16:*:*:*:*:*:*:*

>>jre>>1.4.2_16

cpe:2.3:a:sun:jre:1.5.0:-:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update1:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update10:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update11:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update12:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update13:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update14:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update2:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update3:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update4:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update5:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update6:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update7:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update8:*:*:*:*:*:*

>>jre>>1.5.0

cpe:2.3:a:sun:jre:1.5.0:update9:*:*:*:*:*:*

>>jre>>1.5.0

Weaknesses

CWE ID	Type	Source
CWE-254	Primary	nvd@nist.gov

CWE ID: CWE-254

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html	cve@mitre.org	Mailing List Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html	cve@mitre.org	Mailing List Third Party Advisory
http://secunia.com/advisories/29239	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29273	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29498	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29526	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29541	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29547	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29560	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29582	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29645	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29858	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/29897	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30620	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30676	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/30780	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/31497	cve@mitre.org	Third Party Advisory
http://secunia.com/advisories/32018	cve@mitre.org	Third Party Advisory
http://security.gentoo.org/glsa/glsa-200804-28.xml	cve@mitre.org	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1	cve@mitre.org	Third Party Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1	cve@mitre.org	Third Party Advisory
http://support.apple.com/kb/HT3178	cve@mitre.org	Third Party Advisory
http://support.apple.com/kb/HT3179	cve@mitre.org	Third Party Advisory
http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128	cve@mitre.org	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml	cve@mitre.org	Third Party Advisory
http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml	cve@mitre.org	Third Party Advisory
http://www.mandriva.com/security/advisories?name=MDVSA-2008:080	cve@mitre.org	Third Party Advisory
http://www.mozilla.org/security/announce/2008/mfsa2008-18.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0186.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0210.html	cve@mitre.org	Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2008-0267.html	cve@mitre.org	Third Party Advisory
http://www.securityfocus.com/archive/1/490196/100/0/threaded	cve@mitre.org	Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1019553	cve@mitre.org	Third Party Advisory VDB Entry
http://www.ubuntu.com/usn/usn-592-1	cve@mitre.org	Third Party Advisory
http://www.us-cert.gov/cas/techalerts/TA08-066A.html	cve@mitre.org	Third Party Advisory US Government Resource
http://www.us-cert.gov/cas/techalerts/TA08-087A.html	cve@mitre.org	Third Party Advisory US Government Resource
http://www.vmware.com/security/advisories/VMSA-2008-0010.html	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0770/references	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/0998/references	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1793/references	cve@mitre.org	Third Party Advisory
http://www.vupen.com/english/advisories/2008/1856/references	cve@mitre.org	Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/41030	cve@mitre.org	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486	cve@mitre.org	Third Party Advisory

Hyperlink: http://lists.apple.com/archives/security-announce//2008/Sep/msg00008.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00000.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00002.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://lists.opensuse.org/opensuse-security-announce/2008-04/msg00010.html

Source: cve@mitre.org

Resource:

Mailing List

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29239

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29273

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29498

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29526

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29541

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29547

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29560

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29582

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29645

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29858

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/29897

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/30620

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/30676

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/30780

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/31497

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://secunia.com/advisories/32018

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://security.gentoo.org/glsa/glsa-200804-28.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-233326-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://sunsolve.sun.com/search/document.do?assetkey=1-26-238492-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://support.apple.com/kb/HT3178

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://support.apple.com/kb/HT3179

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0128

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200804-20.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-200806-11.xml

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mandriva.com/security/advisories?name=MDVSA-2008:080

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.mozilla.org/security/announce/2008/mfsa2008-18.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0186.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0210.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.redhat.com/support/errata/RHSA-2008-0267.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.securityfocus.com/archive/1/490196/100/0/threaded

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.securitytracker.com/id?1019553

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: http://www.ubuntu.com/usn/usn-592-1

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-066A.html

Source: cve@mitre.org

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.us-cert.gov/cas/techalerts/TA08-087A.html

Source: cve@mitre.org

Resource:

Third Party Advisory

US Government Resource

Hyperlink: http://www.vmware.com/security/advisories/VMSA-2008-0010.html

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0770/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/0998/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1793/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: http://www.vupen.com/english/advisories/2008/1856/references

Source: cve@mitre.org

Resource:

Third Party Advisory

Hyperlink: https://exchange.xforce.ibmcloud.com/vulnerabilities/41030

Source: cve@mitre.org

Resource:

Third Party Advisory

VDB Entry

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9486

Source: cve@mitre.org

Resource:

Third Party Advisory

Similar CVEs

242Records found

CVE-2006-5870

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-18.51% / 95.00%

7 Day CHG+0.57%

Published-04 Jan, 2007 | 11:00

Updated-07 Aug, 2024 | 20:04

Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer overflows in (1) wmf/winwmf.cxx, during processing of META_ESCAPE records; and wmf/enhwmf.cxx, during processing of (2) EMR_POLYPOLYGON and (3) EMR_POLYPOLYGON16 records.

Vendor-openoffice n/a Sun Microsystems (Oracle Corporation)

Product-openoffice staroffice n/a

CWE ID-CWE-189

Not Available

CVE-2009-4502

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-63.54% / 98.34%

7 Day CHG~0.00%

Published-31 Dec, 2009 | 18:00

Updated-17 Sep, 2024 | 00:05

The NET_TCP_LISTEN function in net.c in Zabbix Agent before 1.6.7, when running on FreeBSD or Solaris, allows remote attackers to bypass the EnableRemoteCommands setting and execute arbitrary commands via shell metacharacters in the argument to net.tcp.listen. NOTE: this attack is limited to attacks from trusted IP addresses.

Vendor-n/a Sun Microsystems (Oracle Corporation)ZABBIX FreeBSD Foundation

Product-freebsd zabbix solaris n/a

CWE ID-CWE-264

Not Available

CVE-2019-3462

Matching Score-8

Assigner-Debian GNU/Linux

Matching Score-8

Assigner-Debian GNU/Linux

CVSS Score-8.1||HIGH

EPSS-9.91% / 92.71%

7 Day CHG~0.00%

Published-28 Jan, 2019 | 21:00

Updated-16 Sep, 2024 | 16:32

Incorrect sanitation of the 302 redirect field in HTTP transport method of apt versions 1.4.8 and earlier can lead to content injection by a MITM attacker, potentially leading to remote code execution on the target machine.

Vendor-NetApp, Inc.Canonical Ltd.Debian GNU/Linux

Product-active_iq ubuntu_linux debian_linux advanced_package_tool element_software apt as used in Debian Stretch and Ubuntu

CVE-2011-3193

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-4.04% / 88.03%

7 Day CHG~0.00%

Published-16 Jun, 2012 | 00:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the Lookup_MarkMarkPos function in the HarfBuzz module (harfbuzz-gpos.c), as used by Qt before 4.7.4 and Pango, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted font file.

Vendor-qt n/a Canonical Ltd.The GNOME Project Red Hat, Inc.openSUSE

Product-qt enterprise_linux_desktop ubuntu_linux enterprise_linux_eus enterprise_linux_workstation pango opensuse enterprise_linux_server n/a

CWE ID-CWE-787

Out-of-bounds Write

CVE-2004-1029

Matching Score-8

Assigner-MITRE Corporation

Vendor-conectiva n/a Gentoo Foundation, Inc.Symantec Corporation Sun Microsystems (Oracle Corporation)HP Inc.

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-42.56% / 97.37%

7 Day CHG~0.00%

Published-24 Nov, 2004 | 05:00

Updated-03 Apr, 2025 | 01:03

The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java applets during data transfer, which allows remote attackers to load unsafe classes and execute arbitrary code by using the reflection API to access private Java packages.

Product-jdk hp-ux gateway_security_5400 enterprise_firewall jre java_sdk-rte linux n/a

CVE-2011-2430

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-6.62% / 90.81%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via crafted streaming media, related to a "logic error vulnerability."

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2428

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.88% / 85.77%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service (browser crash) via unspecified vectors, related to a "logic error issue."

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-20

Improper Input Validation

CVE-2011-2458

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-1.02% / 76.29%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, when Internet Explorer is used, allows remote attackers to bypass the cross-domain policy via a crafted web site.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CVE-2011-2424

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-13.76% / 94.02%

7 Day CHG~0.00%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2427

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.42% / 84.49%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2426

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-11.68% / 93.41%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1649

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-2.81% / 85.58%

7 Day CHG~0.00%

Published-29 Mar, 2016 | 10:00

Updated-12 Apr, 2025 | 10:46

The Program::getUniformInternal function in Program.cpp in libANGLE, as used in Google Chrome before 49.0.2623.108, does not properly handle a certain data-type mismatch, which allows remote attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via crafted shader stages.

Vendor-n/a openSUSE Google LLC Debian GNU/Linux Canonical Ltd.

Product-debian_linux opensuse ubuntu_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2016-1646

Matching Score-8

Assigner-Chrome

Matching Score-8

Assigner-Chrome

CVSS Score-8.8||HIGH

EPSS-71.72% / 98.67%

7 Day CHG~0.00%

Published-29 Mar, 2016 | 10:00

Updated-30 Jul, 2025 | 01:46

Known KEV||Action Due Date - 2022-06-22||Apply updates per vendor instructions.

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.

Vendor-n/a SUSE Red Hat, Inc.Google LLC openSUSE Canonical Ltd.Debian GNU/Linux

Product-enterprise_linux_server package_hub enterprise_linux_eus leap opensuse ubuntu_linux enterprise_linux_desktop enterprise_linux_workstation chrome debian_linux n/a Chromium V8

CWE ID-CWE-125

Out-of-bounds Read

CVE-2003-1572

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-0.42% / 61.00%

7 Day CHG~0.00%

Published-01 Jun, 2009 | 22:00

Updated-16 Sep, 2024 | 23:46

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized memory locations via the ReadEnv class, as demonstrated by reading environment variables using modified .data and .size fields.

Product-jmf n/a

CVE-2009-2949

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-50.18% / 97.75%

7 Day CHG~0.00%

Published-16 Feb, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Integer overflow in the XPMReader::ReadXPM function in filter.vcl/ixpm/svt_xpmread.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to execute arbitrary code via a crafted XPM file that triggers a heap-based buffer overflow.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-190

Integer Overflow or Wraparound

CVE-2011-0480

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.23% / 83.86%

7 Day CHG~0.00%

Published-14 Jan, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in vorbis_dec.c in the Vorbis decoder in FFmpeg, as used in Google Chrome before 8.0.552.237 and Chrome OS before 8.0.552.344, allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted WebM file, related to buffers for (1) the channel floor and (2) the channel residue.

Vendor-n/a Canonical Ltd.Debian GNU/Linux Google LLC

Product-ubuntu_linux chrome_os debian_linux chrome n/a

CWE ID-CWE-120

Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

CVE-2010-3643

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3649

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-4344

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-71.28% / 98.65%

7 Day CHG+3.66%

Published-14 Dec, 2010 | 15:00

Updated-30 Jul, 2025 | 01:47

Known KEV||Action Due Date - 2022-04-15||Apply updates per vendor instructions.

Heap-based buffer overflow in the string_vformat function in string.c in Exim before 4.70 allows remote attackers to execute arbitrary code via an SMTP session that includes two MAIL commands in conjunction with a large message containing crafted headers, leading to improper rejection logging.

Vendor-n/a Exim openSUSE Canonical Ltd.Debian GNU/Linux

Product-ubuntu_linux opensuse exim debian_linux n/a Exim

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3639

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-36.93% / 97.03%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3636

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.26% / 83.96%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictions via unknown vectors.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3652

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3650.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3650

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3647

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-4253

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-5.18% / 89.51%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in Impress in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PNG file in an ODF or Microsoft Office document, as demonstrated by a PowerPoint (aka PPT) document.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3646

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3644

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3645

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3640

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3648

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3641

Matching Score-8

Matching Score-8

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-3.96% / 87.90%

7 Day CHG~0.00%

Published-07 Nov, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, a different vulnerability than CVE-2010-3640, CVE-2010-3642, CVE-2010-3643, CVE-2010-3644, CVE-2010-3645, CVE-2010-3646, CVE-2010-3647, CVE-2010-3648, CVE-2010-3649, CVE-2010-3650, and CVE-2010-3652.

Product-linux_kernel windows solaris android flash_player mac_os_x n/a

CVE-2010-3453

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-7.67% / 91.52%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

The WW8ListManager::WW8ListManager function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 does not properly handle an unspecified number of list levels in user-defined list styles in WW8 data in a Microsoft Word document, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted .DOC file that triggers an out-of-bounds write.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-3452

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-7.11% / 91.16%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted tags in an RTF document.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-416

Use After Free

CVE-2010-3257

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-12.15% / 93.56%

7 Day CHG~0.00%

Published-07 Sep, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit, as used in Apple Safari before 4.1.3 and 5.0.x before 5.0.3, Google Chrome before 6.0.472.53, and webkitgtk before 1.2.6, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving element focus.

Vendor-webkitgtk n/a Apple Inc.Canonical Ltd.Google LLC

Product-ubuntu_linux iphone_os safari chrome webkitgtk n/a

CWE ID-CWE-416

Use After Free

CVE-2010-2648

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-2.85% / 85.70%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

The implementation of the Unicode Bidirectional Algorithm (aka Bidi algorithm or UBA) in Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via unknown vectors.

Vendor-n/a openSUSE Canonical Ltd.Google LLC

Product-ubuntu_linux opensuse chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2647

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-1.70% / 81.54%

7 Day CHG~0.00%

Published-06 Jul, 2010 | 17:00

Updated-11 Apr, 2025 | 00:51

Google Chrome before 5.0.375.99 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via an invalid SVG document.

Vendor-n/a Canonical Ltd.Google LLC

Product-ubuntu_linux chrome n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2941

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.8||CRITICAL

EPSS-27.68% / 96.26%

7 Day CHG~0.00%

Published-05 Nov, 2010 | 16:28

Updated-11 Apr, 2025 | 00:51

ipp.c in cupsd in CUPS 1.4.4 and earlier does not properly allocate memory for attribute values with invalid string data types, which allows remote attackers to cause a denial of service (use-after-free and application crash) or possibly execute arbitrary code via a crafted IPP request.

CWE ID-CWE-416

Use After Free

CVE-2010-3555

Matching Score-8

Assigner-Oracle

Matching Score-8

Assigner-Oracle

CVSS Score-9.3||HIGH

EPSS-13.30% / 93.90%

7 Day CHG~0.00%

Published-19 Oct, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable third party coordinator that the ActiveX Plugin does not properly initialize an object field that is used as a window handle, which allows attackers to execute arbitrary code.

Product-jdk jre n/a

CVE-2010-3450

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-2.02% / 83.03%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary files via a .. (dot dot) in an entry in (1) an XSLT JAR filter description file, (2) an Extension (aka OXT) file, or unspecified other (3) JAR or (4) ZIP files.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CVE-2010-3451

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-9.09% / 92.31%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-416

Use After Free

CVE-2010-3454

Matching Score-8

Assigner-Red Hat, Inc.

Matching Score-8

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-7.02% / 91.10%

7 Day CHG~0.00%

Published-28 Jan, 2011 | 21:13

Updated-11 Apr, 2025 | 00:51

Multiple off-by-one errors in the WW8DopTypography::ReadFromMem function in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via crafted typography information in a Microsoft Word .DOC file that triggers an out-of-bounds write.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-193

Off-by-one Error

CVE-2010-1770

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-9.3||HIGH

EPSS-11.73% / 93.43%

7 Day CHG~0.00%

Published-11 Jun, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, Apple Safari before 4.1 on Mac OS X 10.4, and Google Chrome before 5.0.375.70 does not properly handle a transformation of a text node that has the IBM1147 character set, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document containing a BR element, related to a "type checking issue."

CWE ID-CWE-94

Improper Control of Generation of Code ('Code Injection')

CVE-2009-2950

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-22.96% / 95.69%

7 Day CHG~0.00%

Published-16 Feb, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

Heap-based buffer overflow in the GIFLZWDecompressor::GIFLZWDecompressor function in filter.vcl/lgif/decode.cxx in OpenOffice.org (OOo) before 3.2 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted GIF file, related to LZW decompression.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-787

Out-of-bounds Write

CVE-2010-0050

Matching Score-8

Assigner-Apple Inc.

Matching Score-8

Assigner-Apple Inc.

CVSS Score-8.8||HIGH

EPSS-45.13% / 97.51%

7 Day CHG~0.00%

Published-12 Mar, 2010 | 21:00

Updated-11 Apr, 2025 | 00:51

Use-after-free vulnerability in WebKit in Apple Safari before 4.0.5 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an HTML document with improperly nested tags.

Vendor-n/a Canonical Ltd.Fedora Project openSUSE Apple Inc.

Product-ubuntu_linux fedora opensuse iphone_os safari n/a

CWE ID-CWE-416

Use After Free

CVE-2010-0136

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-4.52% / 88.72%

7 Day CHG~0.00%

Published-16 Feb, 2010 | 19:00

Updated-11 Apr, 2025 | 00:51

OpenOffice.org (OOo) 2.0.4, 2.4.1, and 3.1.1 does not properly enforce Visual Basic for Applications (VBA) macro security settings, which allows remote attackers to run arbitrary macros via a crafted document.

Vendor-n/a Canonical Ltd.The Apache Software Foundation Debian GNU/Linux

CWE ID-CWE-77

Improper Neutralization of Special Elements used in a Command ('Command Injection')

CVE-2010-0395

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-20.60% / 95.36%

7 Day CHG~0.00%

Published-10 Jun, 2010 | 00:00

Updated-11 Apr, 2025 | 00:51

OpenOffice.org 2.x and 3.0 before 3.2.1 allows user-assisted remote attackers to bypass Python macro security restrictions and execute arbitrary Python code via a crafted OpenDocument Text (ODT) file that triggers code execution when the macro directory structure is previewed.

Vendor-n/a SUSE Debian GNU/Linux Canonical Ltd.Fedora Project The Apache Software Foundation openSUSE

Product-ubuntu_linux fedora opensuse debian_linux openoffice linux_enterprise_desktop n/a

CVE-2009-3866

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-5.66% / 90.00%

7 Day CHG~0.00%

Published-05 Nov, 2009 | 16:00

Updated-07 Aug, 2024 | 06:45

The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows remote attackers to execute arbitrary code by modifying a certain JNLP file to have a URL field that points to an unintended trusted application, aka Bug Id 6872824.

Product-jdk jre n/a

CWE ID-CWE-264

Not Available

CVE-2009-3867

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-88.23% / 99.46%

7 Day CHG~0.00%

Published-05 Nov, 2009 | 16:00

Updated-07 Aug, 2024 | 06:45

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a long file: URL in an argument, aka Bug Id 6854303.

Vendor-n/a Sun Microsystems (Oracle Corporation)Microsoft Corporation

Product-solaris jre java_se windows jdk sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2009-3873

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-11.37% / 93.28%

7 Day CHG~0.00%

Published-05 Nov, 2009 | 16:00

Updated-07 Aug, 2024 | 06:45

The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain privileges via a crafted image file, related to a "quantization problem," aka Bug Id 6862968.

Vendor-n/a Sun Microsystems (Oracle Corporation)Microsoft Corporation

Product-solaris jre java_se windows jdk sdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2008-1186

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-9.3||HIGH

EPSS-20.21% / 95.29%

7 Day CHG~0.00%

Published-06 Mar, 2008 | 21:00

Updated-07 Aug, 2024 | 08:08

Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote attackers to gain privileges via an untrusted application or applet, a different issue than CVE-2008-1185, aka "the second issue."